Principal Cloud Platform Engineer

Hasbro•Renton, WA

2d•$172,600 - $259,000

About The Position

The cloud platform underpins how services are built, deployed, secured, and operated across the organization. As a Principal Cloud Infrastructure Engineer, you will define and drive the governance model and automation strategy for cloud infrastructure. This includes setting policy-as-code standards, automating compliance and cost controls, and ensuring infrastructure is provisioned and operated through consistent, auditable, self-service pathways rather than tailored or manual processes. You will operate at both a strategic and hands-on level and will set direction for how cloud resources are governed and automated while also building the tooling and guardrails that make that direction real. Success in this role means engineering teams can self-service the build and operation of infrastructure with confidence that it is secure, cost-aware, and consistent by default, without slowing delivery down.

Requirements

8+ years in cloud engineering, DevOps, or platform engineering, including experience operating at a principal or staff level (setting direction, not just implementing)
Deep experience with major Cloud Platforms (AWS, Azure, or GCP), ideally across more than one
Deep hands-on experience with Infrastructure-as-Code (Terraform and/or Pulumi) at scale, including module design and state/workspace management
Direct experience implementing policy-as-code and cloud governance frameworks
Experience with cloud cost management/FinOps practices and tooling
Familiarity with CI/CD platforms, container registries, and observability tooling as consumers of the standards you build
Ability to influence across platform, security, FinOps, and product engineering teams without direct authority
Strong documentation and communication skills; able to make the case for standards to both engineers and leadership
Experience mentoring engineers and setting technical direction beyond your own immediate team
Experience with platform advocacy, working with partners to understand infrastructure needs in collaboration with Product.

Nice To Haves

Exposure to applying AI tooling to infrastructure problems (policy review, anomaly detection, automation) is a plus

Responsibilities

Define and enforce policy-as-code standards (tagging, naming, encryption, network segmentation, access boundaries) across cloud accounts/subscriptions
Establish guardrails using tools such as OPA, Sentinel, AWS Config/Service Control Policies to report on and prevent drift from approved patterns
Partner closely with Security/IAM to deliver least-privilege enforcement and access-control requirements directly in our self-service capabilities while ensuring compliance and auditability.
Embed cost governance and reporting (budgets, anomaly detection, showback/chargeback) into provisioning workflows
Drive the organization's Infrastructure-as-Code standards (e.g., Terraform/Terraform Cloud, Pulumi)
Establish and maintain reusable, versioned modules and contribution standards that embed governance requirements by default.
Automate environment provisioning, drift detection/remediation, and lifecycle management so policy compliance doesn't depend on manual review
Stay ahead of AI-native tooling and bring forward practical opportunities balancing risk, fit, value, measurability, and alignment to company goals.
Develop golden paths for infrastructure provisioning and service deployment that make the guided path the easiest path
Partner on developer platform tooling and integrations (CI/CD, container registries, managed data services, observability) where they intersect with governance and automation.