Role :

You'll own the design, automation, and reliability of our cloud and identity infrastructure across AWS and GCP, with hybrid identity spanning Okta, Active Directory, and Entra ID. You'll set technical standards for the team, lead incident response, and mentor engineers.

What You'll Do :

Cloud architecture and operations :

- Design and operate AWS infrastructure : multi-account and multi-region structure, VPC and network design, IAM, compute, and storage.

- Plan and test high availability and disaster recovery, and run regular cost reviews.

- Support GCP workloads, org-level IAM, and org policy.

- Maintain consistent networking, connectivity, and guardrails across clouds and on-prem.

Infrastructure as code and automation :

- Own Terraform module design, remote state, and CI/CD-driven plan/apply with drift detection.

- Use Ansible or equivalent for configuration management of Linux systems.

- Automate operational and lifecycle work with Python, PowerShell, or Bash, vendor APIs, and workflow platforms.

Identity and access :

- Own Okta (Identity Engine) architecture : SSO (SAML/OIDC), SCIM lifecycle provisioning, MFA, authentication policy, and Device Trust.

- Manage hybrid identity across Active Directory and Entra ID, including sync and federation.

- Own service-account and machine-identity lifecycle, secrets management, and least-privilege role design.

Reliability and observability :

- Define SLIs and SLOs with service owners, and build the metrics, logs, traces, dashboards, and alerting.

- Work with paging and ITSM tooling and OpenTelemetry-based instrumentation.

- Join the on-call rotation, lead major incidents, write RCAs, and drive fixes.

Security and compliance :

- Drive vulnerability remediation and hardening.

- Own audit evidence collection and remediation for SOC 2 or similar.

Leadership :

- Review designs and pull requests, mentor engineers, and maintain runbooks and architecture documentation.

Required Qualifications :

- 6+ years in systems, infrastructure, or cloud engineering.

- Production AWS architecture experience.

- Hands-on GCP experience.

- Terraform at scale.

- Production Okta experience.

- Working knowledge of Active Directory and Entra ID in a hybrid environment.

- Strong networking fundamentals (TCP/IP, DNS, VPN, load balancing, firewalls).

- Linux administration.

- Proficiency in Python or PowerShell, plus Bash.

- Experience with an observability stack.

- Willingness to join an on-call rotation.

On-Call :

Primary/secondary rotation, roughly one week in 4, including weekends.