Cloud Infrastructure Engineer

Red Cell Partners is an incubation firm building and investing in rapidly scalable technology-led companies. They are seeking an experienced Cloud Infrastructure Engineer to design, deploy, and administer cloud environments with a strong emphasis on virtualization, automation, and security.

Responsibilities:

• Administer and maintain AWS and/or Azure environments, including day-to-day operations of virtual machines, networking, and storage
• Manage VPCs, subnets, routing tables, security groups, NACLs, and private networking constructs
• Deploy, maintain, and optimize EC2 instances, RDS, S3, IAM, KMS, Secrets Manager, and CloudTrail
• Build and manage hardened VM images (AMIs / golden images) for consistent, repeatable deployments
• Implement and support high availability, auto-scaling, and disaster recovery configurations
• Support multi-account or multi-subscription cloud governance structures (e.g., AWS Organizations, Azure Management Groups)
• Design and maintain infrastructure using Terraform, including modular design, remote state management, and workspace strategies
• Lead or support migrations from legacy IaC tooling (e.g., CloudFormation) to modern frameworks
• Enforce policy-as-code guardrails and maintain version-controlled infrastructure repositories
• Build reusable, secure baseline modules for VPC architecture, IAM roles, logging, monitoring, and encryption
• Administer virtualized workloads across cloud environments, including sizing, patching, lifecycle management, and cost optimization
• Support container-based workloads in ECS and/or EKS, including cluster management, networking, and image security
• Assist with transitions from legacy compute paradigms (e.g., EBS-backed instances) to modern container or serverless architectures
• Implement automated drift detection and remediation for both VMs and containerized environments
• Identify and implement automation opportunities to reduce manual operational overhead and improve team velocity
• Integrate infrastructure provisioning and security controls into CI/CD pipelines (GitHub Actions, GitLab CI, or equivalent)
• Implement and maintain secure secrets management practices
• Collaborate with DevSecOps and application engineering teams to enforce least-privilege IAM policies and secure-by-default configurations
• Apply and maintain security hardening baselines (CIS Benchmarks, DISA STIGs) for Linux and Windows virtual systems
• Configure and monitor AWS CloudTrail, GuardDuty, Security Hub, Config, and centralized logging pipelines
• Support SIEM integration (e.g., Splunk, Microsoft Sentinel) and assist with incident response
• Maintain vulnerability management lifecycle including patching, remediation tracking, and reporting
• Support compliance efforts aligned with relevant frameworks (NIST 800-171, CMMC, HIPAA, SOC 2, or FedRAMP as applicable)
• Partner with development, security, and IT operations teams to deliver reliable, scalable services
• Produce and maintain thorough documentation — architecture diagrams, runbooks, SOPs, and evidence artifacts for audits or assessments
• Contribute to budget management, resource planning, and capacity forecasting for cloud environments

Requirements:

• 5+ years of experience in systems administration, cloud operations, or infrastructure engineering
• 3+ years of hands-on experience managing AWS and/or Azure environments, including virtual machine administration
• Strong Terraform experience, including modular design and state management; experience leading IaC migrations is a plus
• Demonstrated ability to automate operational workflows and reduce manual effort at scale
• Strong understanding of IAM, encryption (KMS, TLS), and network segmentation
• Experience with Linux (RHEL/Amazon Linux) and/or Windows Server in a cloud context
• Familiarity with containerization technologies (Docker, ECS, EKS, or Kubernetes)
• Solid understanding of CI/CD pipelines and DevSecOps practices
• Must be a US Citizen & all work must be performed in the United States
• Multi-cloud experience spanning AWS and Azure
• Experience in regulated industries such as healthcare (HIPAA), defense (CMMC/NIST 800-171), or financial services (SOC 2)
• AWS certifications (Solutions Architect, SysOps Administrator, Security Specialty) or Azure equivalents
• CompTIA Security+ or equivalent security certification
• Experience with AWS Control Tower, Landing Zones, or equivalent governance tooling
• Familiarity with SIEM platforms (Splunk, Microsoft Sentinel)
• Experience managing or mentoring distributed technical teams
• PMP, CSM, or similar project/program management certification
• Active DoD security clearance (Secret or above) or ability to obtain and maintain one