SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Platform Science is seeking a Cloud Infrastructure Engineer to join the CloudOps team. This is a hands-on senior individual contributor role focused on building and maintaining foundational cloud infrastructure that enables engineering teams to build, deploy, and operate products at scale.
The CloudOps team owns identity, networking, governance, security guardrails, backup, disaster recovery, and shared cloud services across a multi-account AWS environment spanning hundreds of accounts and multiple business units, with expansion into Azure and GCP. You will work primarily through Infrastructure as Code, creating guardrails and self-service capabilities that allow engineering teams to move quickly without sacrificing security or reliability.
Key responsibilities include:
- Implement and maintain multi-account AWS Landing Zone components (AWS Organizations, Control Tower, AFT, tagging standards, permission boundaries)
- Support governance, security controls, observability, and backup capabilities across AWS, Azure, and GCP
- Administer cloud identity and access management (Okta federation, AWS IAM Identity Center, permission sets, credential hygiene)
- Configure and maintain cloud networking components (IP address management, VPC configuration, routing, transit connectivity, DNS)
- Contribute to migrating workloads to private/zero-trust networking models
- Build and maintain self-service infrastructure workflows (account provisioning, environment provisioning, access requests)
- Execute backup, restore, and disaster recovery procedures; maintain and test DR runbooks
- Build and maintain Terraform/Terragrunt modules consumed by other engineering teams
- Maintain CI/CD automation for cloud infrastructure
- Investigate and remediate cloud security findings
- Support FinOps initiatives by implementing cost optimization opportunities
- Maintain documentation, runbooks, and operating procedures
- Use AI coding agents as part of the engineering workflow, validating output and maintaining code review and production ownership
The scope is intentionally broad, covering cloud identity and permissions, private networking, multi-cloud governance, backup and disaster recovery, security remediation, and developer self-service capabilities. AI-assisted engineering is part of how the team operates, using AI coding agents to accelerate implementation and automation while maintaining rigorous engineering review, security, and production standards.
REQUIREMENTS:
- 5+ years of professional experience in Cloud Infrastructure, DevOps, Site Reliability Engineering, Platform Engineering, Systems Engineering, or related infrastructure discipline
- 3+ years of hands-on experience with AWS or another major public cloud (AWS strongly preferred)
- 1+ years of Infrastructure as Code experience, preferably Terraform and/or Terragrunt
- Working experience within an AWS multi-account environment (AWS Organizations, Control Tower, or comparable landing-zone architecture)
- Exposure to at least one additional major cloud platform (Azure or GCP) beyond a single workload
- Experience building or maintaining Infrastructure as Code modules used by others
- Hands-on experience with cloud identity and access management (SSO, SAML federation, SCIM provisioning, IAM policies/roles, permission boundaries)
- Solid cloud networking fundamentals (IP address planning, VPC/VNet configuration, routing, DNS, network security)
- Experience maintaining CI/CD pipelines (GitHub Actions, Jenkins, or similar)
- Scripting/programming experience with Python, Go, Bash, or similar
- Strong Linux fundamentals
- Working knowledge of Kubernetes and cloud-native infrastructure
- Experience using AI coding agents or AI-assisted development tools (Claude Code, Cursor, Codex, or similar), including validating generated code and identifying operational or security risk
- Ability to work independently on well-defined infrastructure tasks and exercise judgment within established guidelines
- Strong written and verbal communication skills; able to collaborate across Engineering, Security, and FinOps teams
- Advanced English proficiency
- Bachelor's degree in Computer Science, Software Engineering, Information Technology, or related technical field plus 5 years of experience, or equivalent combination of education and experience
- Must reside in Brazil
PREFERRED QUALIFICATIONS:
- AWS Control Tower and Account Factory for Terraform (AFT)
- AWS IPAM, Transit Gateway, or Cloud WAN
- Exposure to multi-cloud environments (AWS, Azure, and/or GCP)
- MongoDB Atlas, Elastic Cloud, or similar managed data platforms
- Wiz, GuardDuty, CrowdStrike, or other cloud security posture/security platforms
- Zero-trust networking technologies such as Zscaler ZPA
- Cloudflare WAF and DNS
- Certificate and PKI lifecycle basics (ACM, cert-manager, Let's Encrypt)
- Exposure to agentic automation pipelines or AI agent workflows
- Cloud cost optimization / FinOps fundamentals
- AWS, Azure, GCP, Terraform, or Kubernetes certifications
