Cloud Infrastructure & Operations Engineer

Job Title: Cloud Infrastructure & Operations EngineerJob Location: Fully RemoteJob Duration: 12 MonthsOverview Senior technical and operational role within client's UCWE Cloud Operations organizationResponsible for secure, scalable, cost-optimized cloud environments across Azure, AWS, Microsoft 365, and Entra IDScope includes: identity, engineering, infrastructure operations, governance, FinOps, compliance, onboarding, architectural guidanceActs as technical leader and governance authority over Client (cloud operations partner)Ideal candidate: hands-on with cloud platforms, familiar with governance models, confident in directing external partnersKey ResponsibilitiesCloud Identity & Access Management Manage Azure & AWS organizations and management groupsOversee Windows Domain Services, identity integrations, directory hygieneAdminister app/service principal registrations and lifecycleAct as Azure Enrollment Admin / AWS Master PayerCloud Engineering Define and maintain architecture standards and reference architecturesSupport Azure & AWS DevOps pipelines, CI/CD tooling, automation frameworksDevelop and maintain Terraform modules and IaC automationProvide engineering oversight for Client-delivered builds and environmentsInfrastructure Operations Troubleshoot connectivity, authentication, networking, and resource issuesEnable application teams and coordinate escalations with ClientSupport Bastion onboarding and secure-access patternsProvide Azure/AWS SDBA support (storage, database, backup)Produce cost estimates, resource sizing, and optimization suggestionsLead/support cloud builds, provisioning, and production cutoversParticipate in application migrations (on-prem → cloud, cloud → cloud)Contribute to change management and patching strategiesCloud Policy, Standards & Governance Maintain/enforce CSP & SaaS approval flowsDefine/refine policies (RBAC, baselines, guardrails)Drive governance for secure, consistent cloud useMaintain naming standards & tagging frameworksManage policy exceptions and sunset timelinesPublish training content, documentation, newsletters, and videosCloud Onboarding Perform AWS & Azure account creation and subscription setupOnboard environments to Astra and internal platformsDefine ownership, RBAC assignments, baseline configurationCapture metadata for compliance, FinOps, and security visibilityAssist with iTAP ID creation, app registration, and access workflowsBilling, Cost Management & FinOps Deliver analytics, reporting, dashboards, and consumption insightsTrack subscription onboarding for financial visibilityMonitor spend, detect anomalies, and drive remediationIdentify systemic cost gaps and refine FinOps playbooksSupport Quicksight dashboards, budget creation, and forecastingMature FinOps practices with Client partnershipCloud Policy Compliance Enforce governance, policy adherence, and guardrailsMonitor deployments for violations, misconfigurations, and driftProvide training to improve compliancePartner with app teams to resolve issuesSupport compliance attestations (SOX, PCI, SPI)Cloud Center of Excellence (CCOE) Provide solution architecture support to cloud consumersDeliver consulting for onboarding, workload design, modernizationMaintain SharePoint knowledge base (runbooks, patterns, training)Partner with enterprise architecture and platform teamsVendor Partnership Oversight (Client) Oversight & Direction: Align Client's work with client standardsQuality Assurance: Review/approve Client outputs (pipelines, IaC, builds)Delivery & Execution: Coordinate handoffs, escalations, and intakeStrategic Partnership: Drive continuous improvement, automation, efficiencyQualificationsRequired 5+ years in cloud infrastructure/operations/engineeringProficiency with Azure, AWS, Entra ID, DevOps pipelines, Terraform, cloud networkingExperience with large-scale managed services partnersStrong understanding of governance, FinOps, identityStrong communication and leadership skillsPreferred Azure or AWS Architect certificationsFinOps Practitioner certificationExperience with large-scale platform migrationsKnowledge of compliance frameworks (SOX, PCI, ISO)Technical SkillsMust Have Deep knowledge of cloud identity & access management (Entra ID, RBAC, app registrations, service principals)Ability to enforce governance, security guardrails, compliance controls, FinOps practicesHands-on expertise with Azure & AWS production environments at enterprise scaleProficiency with Terraform and automated deployments via CI/CD pipelinesExperience designing secure, scalable, governed cloud architecturesStrong troubleshooting across networking, authentication, connectivity, availability, production cutoversNice To Have Azure/AWS Architecture or FinOps certificationsBackground in large-scale platform/application migrations (on-prem → cloud, cloud → cloud)Experience as solution architect/technical advisor in a Cloud Center of Excellence (CCoE)Experience building/maintaining landing zones, management groups, multi-account hierarchiesFamiliarity with compliance frameworks (SOX, PCI) in cloud environmentsExperience governing managed services partners, including QA of IaC, pipelines, buildsMetasys Technologies is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identify, national origin, veteran or disability status.