[Remote] Cloud Engineer

Note: The job is a remote job and is open to candidates in USA. Team Cymru is a cybersecurity and threat-intelligence organization focused on making the digital world safer. The Cloud Engineer will administer and grow the company’s multi-account AWS environment, managing infrastructure, identity, governance, networking, security, monitoring, and cost optimization while supporting on-premises private-cloud automation and participating in an on-call rotation.

Responsibilities

• Administer the AWS Organization, managing accounts, organizational units, and the multi-account structure day to day
• Administer IAM (users, roles, policies, least-privilege access) along with secrets and key management (Secrets Manager, KMS)
• Implement and maintain governance guardrails, including Service Control Policies (SCPs), Control Tower guidelines, and Account Factory provisioning, under senior guidance
• Design, deploy, and maintain infrastructure as code with CloudFormation, using version control, change sets, and drift detection, and take part in the CI/CD process for templates
• Administer networking and VPCs, including subnets, routing, security groups, and connectivity
• Manage billing and cost: budgets and alerts, cost-allocation tagging, and rightsizing/optimization recommendations
• Maintain resource tagging and governance standards that feed cost allocation and AWS Config rules
• Operate cloud observability, including CloudWatch metrics, logs, and alarms, and CloudTrail, and respond to alerts
• Maintain baseline cloud security services (GuardDuty, Security Hub, AWS Config) and respond to infrastructure-layer security findings in partnership with the Security team
• Support the on-premises private cloud through process-improvement automation, monitoring automation, and application integration, working closely with and learning from the SRE team
• Take part in a shared on-call rotation, responding to incidents and driving resolution
• Maintain documentation and runbooks

Skills

• ● AWS Certified Cloud Practitioner or an AWS Associate-level certification
• ● 1-3 years of hands-on AWS experience (junior to mid-level)
• ● Working knowledge of AWS Organizations, IAM, and multi-account concepts
• ● Experience with infrastructure as code, especially CloudFormation
• ● Familiarity with VPC networking (subnets, routing, security groups)
• ● Exposure to AWS cost management and governance (SCPs, tagging, budgets)
• ● Comfortable scripting in Bash and/or Python
• ● Willingness to learn on-prem virtualization and to join an on-call rotation
• ● AWS Certified Cloud Practitioner or AWS Associate-level certification required
• ● Minimal to occasional travel may be required depending on team needs
• ● Hands-on Control Tower and Account Factory experience (nice to have)
• ● CloudWatch/CloudTrail observability and baseline security services like GuardDuty, Security Hub, AWS Config (nice to have)
• ● Secrets Manager / KMS experience (nice to have)
• ● Git-based workflows and CI/CD for infrastructure as code (nice to have)
• ● Exposure to on-prem hypervisors (Xen, Proxmox) or Linux administration a plus
• ● Background in a security- or threat-intelligence-conscious environment a plus

Benefits

• Remote position
• Collaborative, mission-driven culture
• Opportunity to contribute to improving global security
• Opportunity to learn from the Site Reliability Engineering team and develop automation skills

Company Overview