AWS Cloud Engineer: AI-Driven, Secure, On-Call

Knack; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Knack is seeking a Cloud Engineer to own and evolve infrastructure, hardened for SOC 2/HIPAA, and integrated with AI capabilities. You will manage AWS infrastructure as code using Terraform in a GitOps workflow, ensure security controls, and drive automation across regions.

The role supports a fully remote US-based or international contractor arrangement, with a weekly 24/7 on-call rotation and collaboration with an AI-forward team.

Qualifications

• 3–5 years in cloud infrastructure, DevOps, SRE, or platform engineering, including 2+ years in AWS production environments.
• Experience shipping infrastructure changes through code review.
• Experience operating a multi-tenant SaaS platform at scale and participating in a 24/7 on-call rotation.
• Solid knowledge of AWS services (EC2, ECS/Fargate, Lambda, VPC, IAM, S3, CloudFront, RDS).
• Strong Terraform understanding with module design, state management, and pull-request CI/CD workflows.

Responsibilities

• Run AWS infrastructure as code with a pull-request-based GitOps workflow and manage configuration drift across regions.
• Design and operate how AI assistants interact with AWS environments for investigation, analysis, and incident triage.
• Enforce security controls, encryption, and IAM policies, and manage secrets rotation and WAF configurations.
• Support SOC 2 and HIPAA controls, log retention, and audit trails across environments.
• Build dashboards and runbooks for monitoring, alerts, and rapid response.

Skills

Cloud infrastructure

DevOps

SRE

Platform engineering

On-call experience

Tools

AWS infrastructure

Terraform

CI/CD

GitOps

Docker

Linux

Job description

Knack is seeking a Cloud Engineer to own and evolve infrastructure, hardened for SOC 2/HIPAA, and integrated with AI capabilities. You will manage AWS infrastructure as code using Terraform in a GitOps workflow, ensure security controls, and drive automation across regions.

The role supports a fully remote US-based or international contractor arrangement, with a weekly 24/7 on-call rotation and collaboration with an AI-forward team.