Senior Cloud Infrastructure Engineer

Astronautics Corporation of America•Oak Creek, WI

20h•Hybrid

About The Position

Astronautics Corporation of America and Kearfott Corporation are seeking a Senior Cloud Infrastructure Engineer to design, build and operate secure, compliant cloud environments supporting engineering, manufacturing and business operations. The engineer will bring deep expertise in at least one of GCP, AWS or Azure and help shape the organization’s use of all three platforms. The role partners with Infrastructure, Cybersecurity and business teams to translate business needs into reliable cloud solutions while protecting Controlled Unclassified Information (CUI) and export-controlled technical data. It also owns operational documentation used by support, infrastructure and cybersecurity teams. This is a hybrid on-site position at the company’s headquarters in Oak Creek, Wisconsin, reporting directly to the Senior Manager, Cybersecurity & I.T. Infrastructure. The role leads cloud solutions from concept through design, implementation, operational handoff and support, and mentors engineers while helping establish infrastructure engineering standards.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Computer Engineering or a related field, with at least 10 years of infrastructure, systems or cloud engineering experience, including at least 7 years building production cloud environments; a minimum of 10 years of directly relevant experience may be accepted in lieu of a degree.
Expert-level, hands-on experience with at least one of GCP, AWS or Azure, and ability and willingness to become proficient in the other two.
Strong Terraform or OpenTofu experience, including module design, state management, workspaces and testing.
Working experience with at least one cloud-native infrastructure-as-code tool, such as Bicep/ARM, CloudFormation, GCP Deployment Manager or Config Connector.
Experience with configuration management tools such as Ansible and Git-based CI/CD platforms such as GitHub Actions, Azure DevOps or GitLab CI.
Hands-on experience implementing security controls in regulated environments, such as CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP or DFARS 252.204-7012.
Strong understanding of cloud networking, identity and access management, encryption and key management, and centralized logging.
Scripting experience in Python, PowerShell or Bash.
Strong technical writing skills, including the ability to explain complex infrastructure in clear runbooks, procedures, architecture documents and knowledge articles for technical and non-technical audiences.
Experience creating operational documentation used by service desk, operations or security teams to support systems independently; candidates should be prepared to share sanitized writing samples.
Experience using diagramming tools such as Visio, Lucidchart or draw.io to create architecture, network or data-flow diagrams.
Experience gathering business requirements and turning them into cloud solution architectures, design documentation and stakeholder presentations.
Sound architectural judgment and ability to explain trade-offs among cost, security, performance, resiliency and operational complexity.
Working knowledge of cloud architecture frameworks such as AWS Well-Architected, Microsoft Azure Well-Architected and Google Cloud Architecture Framework.

Nice To Haves

Experience with government or sovereign cloud offerings, such as AWS GovCloud, Azure Government, Microsoft 365 GCC-High or GCP Assured Workloads.
Direct participation in a CMMC Level 2 assessment, DIBCAC review or FedRAMP authorization.
Experience building ITAR-compliant enclaves or CUI data boundaries.
Policy-as-code experience with OPA/Rego, HashiCorp Sentinel or Checkov.
Kubernetes experience with GKE, EKS or AKS, including container security hardening.
Hybrid infrastructure experience with on-premises Active Directory, VMware or Hyper-V, and cloud identity federation.
Experience managing knowledge bases in an ITSM platform such as Ivanti Neurons or ServiceNow, and familiarity with ITIL change and knowledge management processes.
Docs-as-code experience, including Markdown, Git-managed documentation or tools such as terraform-docs.
Experience writing System Security Plans, control implementation statements or other compliance documentation.
Experience as a solutions architect or cloud architect, or supporting multiple business units or legal entities with shared infrastructure.
Cloud cost management and FinOps experience, including cost modeling, budgeting and optimization.
Familiarity with architecture modeling approaches such as the C4 model, TOGAF or architecture decision records.
Relevant certifications, such as Google Professional Cloud Architect, AWS Solutions Architect Professional, Azure Solutions Architect Expert, HashiCorp Terraform Associate, CISSP or CCSP.

Responsibilities

Design, build and maintain cloud infrastructure across GCP, AWS and Azure, including government and sovereign cloud environments.
Build reusable, version-controlled landing zones and infrastructure-as-code modules using Terraform or OpenTofu and cloud-native tools.
Create CI/CD pipelines for infrastructure changes with automated testing, peer review and policy-as-code controls.
Harden operating systems and cloud platforms using Ansible or similar tools, and apply and maintain DISA STIG and CIS baselines.
Implement and validate CMMC Level 2 and NIST SP 800-171 controls, and design for ITAR and EAR requirements, including U.S. data residency, U.S. Person access, encryption and key management.
Produce and maintain compliance evidence, including System Security Plan inputs, configuration baselines, architecture diagrams and audit artifacts for C3PAO assessments.
Monitor for and correct configuration drift, and manage infrastructure changes through formal change control.
Work with cybersecurity, identity and endpoint teams on logging, monitoring, access management and incident response across on-premises and cloud environments, including Active Directory and Entra ID.
Gather requirements from business leaders, application owners and project teams, and translate functional and non-functional needs into technical designs.
Evaluate cloud platforms, services and deployment patterns; estimate cost, effort and risk; and apply FinOps practices to manage costs over time.
Lead solutions from concept through design, implementation, operational handoff and support; document designs and decisions; and present recommendations to technical and non-technical stakeholders.
Write and maintain runbooks, standard operating procedures, architecture and network diagrams, configuration standards, troubleshooting guides and knowledge base articles.
Publish documentation in the IT service management platform, link it to change records, keep it current as systems change, and make documentation review part of infrastructure delivery.
Establish documentation templates, standards and review cycles, and prepare new services for operations through walkthroughs, training and support-readiness reviews.
Mentor engineers and help set infrastructure engineering standards across the organization.