Cloud Engineer

BeyondTrust; Ottawa; On-site; CAD 90,000 - 140,000; Full time

Job summary

BeyondTrust is seeking a Cloud Engineer to design, secure, and operate our mission-critical cloud infrastructure, ensuring availability and performance for users worldwide. You will build multi-account AWS, Azure, and GCP environments aligned with standards and best practices.

Responsibilities include Terraform modules, GitHub Actions pipelines, incident response, identity federation, governance, and cost optimization, with after-hours support as needed.

Qualifications

• 2+ years hands-on experience with AWS core services, including networking, compute, storage, and automation.
• Strong verbal and written communication skills, with ability to create technical documentation.
• 2+ years scripting experience using Python, PowerShell, or Bash.

Responsibilities

• Design, deploy, and secure multi-account AWS, Azure, and GCP environments in alignment with organizational standards.
• Develop and maintain Terraform modules, remote state management, and version-controlled configurations.
• Build and maintain CI/CD pipelines using GitHub Actions, including self-hosted runners.
• Troubleshoot incidents, apply patches, validate backups and recovery processes, and optimize for performance and cost.
• Manage identity federation, authentication, authorization, and privileged access controls across cloud platforms.
• Enforce governance standards, including account management and resource tagging, with auditable changes.

Skills

AWS core services

Networking & VPC

Terraform

GitHub Actions

Python/PowerShell/Bash

IAM & Security

Education

Bachelor’s degree in Computer Science or related

Tools

AWS

Azure

GCP

Terraform

GitHub Actions

Job description

• The Cloud Engineer designs, secures, and supports mission-critical cloud infrastructure that enables reliable services for users worldwide
• Operate and maintain BeyondTrust’s cloud infrastructure, ensuring availability, performance, and operational health across all environments
• Design, deploy, and secure multi-account AWS, Azure, and GCP environments in alignment with organizational standards
• Design, deploy, and support AWS networking solutions, including VPCs, Transit Gateway, VPC Peering, PrivateLink, VPC Endpoints, and related routing and connectivity services
• Develop and maintain reusable Terraform modules, remote state management, and version-controlled configurations that enforce infrastructure standards
• Build and maintain CI/CD pipelines using GitHub Actions, including self-hosted runners, to deliver infrastructure and application changes consistently and reliably
• Troubleshoot and resolve incidents, apply patches, validate backup and recovery processes, and optimize infrastructure for performance and cost efficiency
• Troubleshoot cloud connectivity issues with DNS, routing, load balancing, and application communication across multi-account environments
• Provide after-hours support as needed, resolve incidents, and document post-incident reviews and follow-up actions
• Administer identity federation, authentication, authorization, and privileged access controls across cloud platforms
• Integrate, manage, and support third-party tools used for cloud access, operations, security, and auditing
• Enforce governance standards, including account management, resource tagging, configuration compliance, and capacity planning through controlled and auditable changes
• Leverage AI-assisted engineering tools to develop reusable automation that accelerates delivery and improves team productivity
• Create and maintain architecture diagrams, Terraform standards, SOPs, troubleshooting guides, and disaster recovery documentation

The successful candidate demonstrates strong technical judgment, operational discipline, and the ability to apply practical solutions to complex cloud engineering challenges2+ years of hands-on experience with AWS core services, including networking, compute, storage, load balancing, monitoring, and automation servicesStrong verbal and written communication skills, including the ability to create and maintain technical documentationFamiliarity with cloud monitoring and observability tools such as CloudWatch, Prometheus, or Datadog2+ years of experience designing, securing, and managing large cloud environments in AWS, Azure, or GCP2+ years of scripting experience using Python (preferred), PowerShell, or BashStrong understanding of AWS networking, including CIDR, routing, DNS, security controls, Transit Gateway, and VPC connectivity services2+ years of experience building or supporting CI/CD pipelines using GitHub Actions or similar automation platformsStrong troubleshooting, problem-solving, and root cause analysis skillsBachelor’s degree in Computer Science, Information Systems, Computer Engineering, or equivalent practical experience2+ years of experience developing and maintaining Terraform modules or other infrastructure as code solutions2+ years of experience with Git workflows, version control, scripting, configuration management, and automated infrastructure testing and validation2+ years of experience with AWS IAM, including roles, policies, permissions, and access management2+ years of experience working within ITSM and change management processesGitHub Actions, self-hosted runners, or CI/CD platform administrationAWS Organizations, Control Tower, and multi-account governanceAWS Certified Solutions Architect Associate, AWS Certified CloudOps Engineer, or equivalent cloud certificationCloud observability, infrastructure security, or regulated environmentsExperience using AI-assisted engineering tools, such as GitHub Copilot, Claude Code, or equivalent solutions, to improve development and operational efficiencyImplementing cloud controls aligned with SOC 2, ISO 27001, NIST CSF 2.0, or FedRAMP Moderate requirements3+ years of experience in two or more of the following areas:AWS networking, including VPC, IPAM, WAF, and hybrid network architectures