Cloud Infrastructure Engineer

platformscience; Brasil; Presencial; BRL 180 000 - 320 000; Tempo integral

Resumo da oferta

Platform Science is seeking a Cloud Infrastructure Engineer to join our CloudOps team. You will own end-to-end infrastructure in a multi-account AWS setup and extend guardrails across Azure and GCP.

You'll work with IaC, automation, and AI-assisted workflows to move fast while maintaining security and reliability.

Qualificações

• 5+ years of professional experience in Cloud Infrastructure or related field.
• 3+ years hands-on experience with AWS.
• 1+ years of Infrastructure as Code experience, preferably Terraform/Terragrunt.
• Experience operating AWS at organizational scale, including AWS Organizations and multi-account architecture.
• Production experience with Azure or GCP beyond AWS.

Responsabilidades

• Own and evolve multi-account AWS Landing Zone, including AWS Organizations, Control Tower, and AFT.
• Extend cloud governance, security controls, observability, and backup across AWS, Azure, and GCP.
• Improve cloud identity and access management using least-privilege principles and federations.
• Design and operate cloud networking capabilities, including VPCs, routing, and DNS.
• Build self-service infrastructure capabilities for engineering teams, including account provisioning and environment management.
• Develop and maintain CI/CD automation for cloud infrastructure.
• Partner with Security and FinOps to address findings and optimize costs.
• Create reusable Terraform/Terragrunt modules and infrastructure patterns.

Conhecimentos

Cloud Infrastructure

DevOps

Site Reliability Engineering

Platform Engineering

Terraform

Terragrunt

AWS

Azure

GCP

IAM / Identity Management

Ferramentas

Terraform

Terragrunt

AWS

Azure

GCP

Okta

AWS Organizations

Control Tower

Descrição da oferta de emprego

Who We Are

At Platform Science, we're working to connect everything that moves.

Founded in 2015, Platform Science is an open IoT platform partnering with innovative fleets, application developers, vehicle manufacturers, and equipment providers across the transportation industry. Our technology helps deliver modern solutions to supply chain professionals around the world.

Our employees bring diverse backgrounds, experiences, and perspectives. We believe great ideas can come from anywhere, and we foster a culture built around innovation, collaboration, empathy, resilience, and transparency.

About the Role

Platform Science is looking for a Cloud Infrastructure Engineer to join our CloudOps team.

CloudOps owns the foundational cloud infrastructure that enables our engineering teams to build, deploy, and operate products at scale. The team manages identity, networking, governance, security guardrails, backup, disaster recovery, and shared cloud services across a multi-account AWS environment spanning hundreds of accounts and multiple business units. We are also extending this operating model across Azure and GCP.

This is a hands‑on senior individual contributor role for an engineer who enjoys building foundational infrastructure and solving complex cloud problems. You will own infrastructure and platform capabilities end to end, work primarily through Infrastructure as Code, and create guardrails and self‑service capabilities that allow engineering teams to move quickly without sacrificing security or reliability.

The scope is intentionally broad. You may work on cloud identity and permissions, private networking, multi‑cloud governance, backup and disaster recovery, security remediation, or developer self‑service capabilities.

AI‑assisted engineering is also part of how the team operates. We use AI coding agents to accelerate implementation and automation while maintaining rigorous engineering review, security, and production standards.

What You'll Do

• Own and evolve our multi-account AWS Landing Zone , including AWS Organizations, Control Tower, Account Factory for Terraform (AFT), organizational structures, Service Control Policies, tagging standards, and permission boundaries.
• Extend cloud governance, operational standards, security controls, observability, and backup capabilities across AWS, Azure, and GCP .
• Improve cloud identity and access management using least-privilege principles, including Okta federation, AWS IAM Identity Center, permission sets, group design, credential management, and reduction of standing privileged access.
• Design and operate cloud networking capabilities, including IP address management, VPC architecture, routing, transit connectivity, Cloud WAN, egress architecture, and public/private DNS.
• Help transition workloads from public‑internet exposure to private and zero‑trust networking models , including Kubernetes control planes, databases, and internal platforms.
• Build self‑service infrastructure capabilities for engineering teams, including account provisioning, environment provisioning, access requests, account lifecycle management, and infrastructure inventory.
• Design and maintain backup, restore, and disaster recovery capabilities across cloud regions, accounts, and business units with different recovery requirements.
• Implement immutable and ransomware‑resistant backup strategies for cloud‑native and managed third‑party data platforms.
• Build reusable Terraform/Terragrunt modules and infrastructure patterns that can be safely consumed by engineering teams across the organization.
• Develop and maintain CI/CD automation for cloud infrastructure.
• Partner with Security teams to investigate and remediate cloud security findings.
• Partner with FinOps teams to identify cloud cost optimization opportunities that can be implemented broadly across the organization.
• Build and maintain documentation, cloud standards, operating procedures, and shared responsibility models.
• Use AI coding agents as part of the engineering workflow while maintaining ownership for requirements, architecture, testing, security, code review, and production outcomes.
• Develop reusable prompts, context, workflows, and agent capabilities that improve the CloudOps team's productivity.

Required Experience

• 5+ years of professional experience in Cloud Infrastructure, DevOps, Site Reliability Engineering, Platform Engineering, Systems Engineering, or a related infrastructure discipline.
• 3+ years of hands‑on experience with AWS or another major public cloud , with significant AWS experience strongly preferred.
• 1+ years of Infrastructure as Code experience , preferable using Terraform and/or Terragrunt.
• Experience operating AWS at organizational scale, including AWS Organizations, multi‑account architecture, and Control Tower or a comparable landing‑zone architecture .
• Production experience with at least one additional major cloud platform - Azure or GCP - beyond man