[Remote] Senior Cloud Engineer

Note: The job is a remote job and is open to candidates in USA. Soteria is a SOC 2 Type II certified Managed Service Provider and Cloud Solution Provider delivering secure, scalable IT solutions to clients in the insurance and financial services industries. The Senior Cloud Engineer leads complex AWS and Azure infrastructure initiatives, including Infrastructure as Code, CI/CD, security, governance, automation, and documentation. The role also supports AI-ready environments, client engagement, technical leadership, and mentorship.

Responsibilities

• Architect, deploy, and manage cloud infrastructure across AWS and Azure using Infrastructure as Code (Terraform, ARM/Bicep, CloudFormation)
• Design and optimize CI/CD pipelines using Azure DevOps, GitHub Actions, or AWS CodePipeline to support continuous integration and delivery
• Manage cloud governance, cost optimization, and resource lifecycle across multi-cloud environments
• Implement and maintain security posture using native cloud tooling (Azure Security Center, AWS Security Hub, GuardDuty, Defender for Cloud)
• Engage directly with clients to understand requirements, define solutions, and communicate implementation plans clearly to both technical and non-technical audiences
• Translate business requirements into well-documented cloud architectures, no handholding required
• Participate in discovery calls, technical reviews, and ongoing client relationship management
• Design and enforce identity and access management solutions across Entra ID (Azure AD), AWS IAM, and integrated third-party platforms (Okta, Duo)
• Align implementations with security frameworks including NIST and CIS; support SOC 2 compliance requirements
• Automate infrastructure deployments, lifecycle management, and routine operational tasks using PowerShell, Python, AWS CLI, Azure CLI, and Graph/AWS APIs
• Build and maintain thorough technical documentation: architecture diagrams, runbooks, SOPs, and implementation records
• Establish reusable patterns, templates, and modules to accelerate future delivery
• Support the build-out of AI-ready cloud environments, including compute configurations, secure API connectivity, and data pipeline infrastructure that supports AI/ML workloads
• Collaborate with internal teams on Soteria's AI governance and adoption initiatives, contributing cloud expertise to responsible AI deployment
• Stay current on emerging AI infrastructure patterns (LLM hosting, vector databases, retrieval-augmented generation architecture) and bring relevant recommendations forward
• Serve as a senior escalation point for complex infrastructure and endpoint issues
• Mentor junior engineers and lead technical workshops or knowledge-sharing sessions
• Contribute to Soteria's engineering standards, toolchain decisions, and delivery practices

Skills

• 7+ years of experience in cloud infrastructure engineering with hands-on delivery across both AWS and Azure
• Deep expertise in Infrastructure as Code — Terraform required; experience with ARM/Bicep or CloudFormation a plus
• Azure: Azure DevOps, Entra ID (Service Principals, Managed Identities), Security Center, Conditional Access, Policy, Microsoft Intune
• AWS: EC2, VPC, IAM, S3, Lambda, CloudFormation/CDK, AWS Organizations, Control Tower, Security Hub, GuardDuty
• Advanced scripting skills in PowerShell and/or Python; experience with Azure CLI, AWS CLI, and REST/Graph API integrations
• Working knowledge of security frameworks (NIST, CIS) and how they apply to cloud design decisions
• Familiarity with AI/ML workload infrastructure — including API-connected services, compute requirements, and data architecture patterns that support AI deployment at scale
• Strong written and verbal communication skills — you can explain complex infrastructure decisions to a client stakeholder and a junior engineer in the same afternoon
• Demonstrated experience creating architecture documentation, runbooks, and technical SOPs
• Bachelor's degree in Computer Science, Information Systems, or equivalent professional experience
• Advanced Azure networking: VNet, vWAN, Firewall, VPN Gateway, ExpressRoute, Load Balancers, Private Link
• AWS networking: Transit Gateway, Direct Connect, Route 53, WAF, CloudFront
• Observability and monitoring: Azure Monitor, Log Analytics, Application Insights; AWS CloudWatch, CloudTrail
• Disaster recovery and backup strategies across cloud platforms
• DevSecOps methodologies and toolchain integration
• Cloud cost management and FinOps practices (Azure Cost Management, AWS Cost Explorer)
• Identity platforms: Okta, Duo, or similar IAM integrations
• Any additional Azure, AWS, or cybersecurity certifications

Benefits

• Medical: Three Regence plans; HDHP with HSA option. Employee-only from $0/mo.
• Dental & Vision: MetLife PPO/Vision. $0/mo dental; $180 vision allowance.
• 401(k) Safe Harbor: Employer match 3–5% via Vestwell. Eligible at 6 months.
• Semi-Annual Bonus: Eligible employees, based on individual + company performance.
• PTO: 15 days, refreshing annually.
• 10 paid holidays including a floating day.
• $50K employer-paid life/AD&D insurance.
• Voluntary STD/LTD at 60% income.
• EAP: Free, confidential counseling, legal, financial and life guidance.
• Supplemental coverage: Accident, critical illness, group legal, and Aura ID protection.
• Full equipment provided.
• Fully remote work arrangement.
• Optional emergency savings account through Vestwell alongside the 401(k).
• Access to cutting-edge tooling and a culture that supports continuous learning.

Company Overview