Lead Cloud Automation & Governance Engineer

Nutanix•San Jose, CA

4d•Hybrid

About The Position

As a Lead Cloud Automation & Governance Engineer, you will operate as a senior individual contributor and technical lead within our G&A – IT Cloud Ops organization. You will define and implement how Nutanix governs, automates, secures, and optimizes public-cloud infrastructure across AWS, GCP, and Azure. This role allows you to own critical cloud governance, FinOps, and operational capabilities while increasing the team's ability to scale securely and efficiently through automation.

Requirements

Professional experience operating or engineering cloud infrastructure in AWS.
Demonstrated proficiency in AWS IAM, Organizations, account and access patterns, EC2, S3, EventBridge, and cloud APIs.
Strong hands-on experience with GitOps and DevOps practices, including version control, CI/CD, automated testing, and production change management.
Strong Infrastructure as Code experience, especially Terraform.
Strong automation and scripting ability in Python, Go, or a comparable language.
At least working knowledge of GCP and Azure governance, IAM, resource organization, billing, and automation concepts.

Nice To Haves

Candidates who can work near Nutanix headquarters are preferred.

Responsibilities

Design, build, and operate maintainable, reusable, and observable cloud platforms and self-service workflows using Python, cloud APIs, and event-driven patterns.
Replace one-off scripts with enterprise solutions across large, multi-account, and multi-region AWS environments (including cross-account access and account lifecycles).
Establish operational ownership, testing, documentation, release management, and rollback standards.
Serve as the principal SME for AWS architecture, governance, and core services (IAM, Organizations, EventBridge, EC2, S3, billing, and cross-account roles).
In partnership with InfoSec, define and enforce security guardrails, privileged access controls, resource policies, account hygiene, regional/service restrictions, and exception workflows.
Debug complex production issues involving IAM, networking, bucket policies, and cross-service integrations while evaluating new AWS capabilities for platform enablement.
Implement auditable, version-controlled GitOps and CI/CD pipelines using pull requests, peer reviews, branching strategies, and progressive delivery.
Integrate security, cost, compliance, policy-as-code, secrets management, and automated testing directly into the software delivery lifecycle.
Eliminate toil via event-driven remediation, scheduled automation, clear runbooks, and strict environment separation.
Lead the architectural design, module creation, and lifecycle management for IaC using Terraform (with exposure to Pulumi or similar).
Standardize multi-account/multi-cloud state management, provider configurations, and drift detection while enforcing code-review discipline and safe state-change practices.
Rationalize platform tooling to eliminate brittle or duplicative automation.
Drive a unified governance, visibility, and cost-optimization model across AWS, GCP, and Azure.
Normalize cloud billing/usage data into actionable reporting models for business, finance, and engineering stakeholders.
Automate rightsizing, savings commitment strategies, tagging compliance, and waste reduction—balancing cost efficiency against reliability, security, and developer speed.