Cloud Engineer II (Infrastructure)

Astreya; Boulder (CO); On-site; USD 110,000 - 150,000; Full time

Job summary

Astreya seeks a hands-on Cloud Infrastructure Engineer to build and maintain cloud and virtualized infrastructure in a mid-level role. You will deploy environments, improve reliability, and manage IAM across Linux and Windows, using Terraform, Ansible, Python, and PowerShell.

Responsibilities include configuring GCP environments, on-prem and cloud infrastructure, high-availability and runbook documentation, with on-call escalation in a global support model.

Qualifications

• 5–8 years of hands-on cloud and enterprise infrastructure experience in production.
• GCP core services proficiency (Compute Engine, Cloud Storage, VPC, IAM).
• Terraform and Ansible mandatory; scripting in Python/Bash/PowerShell.
• Linux and Windows administration with virtualization (VMware / Hyper-V).
• Experience with IAM across OS and cloud (Active Directory, Google IAM, RBAC).
• Clear technical documentation skills (runbooks and TDD contributions).
• Certifications — Required: GCP Professional Cloud Architect or GCP Associate Cloud Engineer.
• Beneficial: HashiCorp Terraform Associate, Red Hat RHCE, ITIL Foundation.

Responsibilities

• Set up cloud environments and enforce IAM policies.
• Deploy high-availability patterns and disaster recovery.
• Write and maintain IaC with Terraform and Ansible.
• Automate provisioning with Python and Bash.
• Provide runbooks and Technical Design Documentation (TDD).
• Support on-call escalations in a global support model.

Skills

Cloud infrastructure

GCP core services

Terraform

Ansible

Python

Bash

PowerShell

Linux administration

Windows administration

IAM / RBAC

Documentation

Tools

Terraform

Ansible

Puppet

Git

PowerShell

Dell iDRAC

DellOMe

VMware

Hyper-V

Job description

As a Cloud Infrastructure Engineer, you will help build and look after the cloud and virtualized infrastructure. This

is a hands-on, mid-level role where your work has real impact: working from the team's architecture and standards,

you will set up cloud environments, make deployments faster and more reliable through Terraform and Ansible, care

for Linux and Windows systems, and put identity and access controls in place.

Key Responsibilities

• Implement and configure GCP environments (Compute Engine, Cloud Storage with retention policies, VPC networking) for centralized security applications
• Build and maintain virtualized on-premises and cloud-hosted infrastructure
• Deploy high-availability mechanisms, failover, clustering and load-balancing and validating
• Author and maintain Infrastructure-as-Code using Terraform and Ansible; contribute to orchestration and configuration management via Puppet, Git, PowerShell
• Automate routine provisioning and sustainment tasks through Python and Bash scripting to reduce manual effort and configuration drift.
• Provision and administer infrastructure IAM across operating systems, enforcing least-privilege and least-service models.
• Configure tiered storage and database resources in line with retention, uptime and auditability requirements.
• Provide implementation-tier support for escalations from operations and sustainment teams, escalating design-level issues to L3 with detailed handover notes.
• Produce and maintain runbooks, configuration records and Technical Design Documentation (TDD)

Required Qualifications & Skills

• 5–8 years of hands-on experience in cloud and enterprise infrastructure engineering, with demonstrated delivery in production environments.
• Working proficiency in GCP core services — Compute Engine, Cloud Storage, VPC and IAM — and cloud-native high-availability patterns.
• Practical Infrastructure-as-Code experience with Terraform and Ansible (mandatory); scripting in Python, Bash and PowerShell; familiarity with Puppet and Git.
• Linux and Windows enterprise OS administration; virtualization (VMware / Hyper-V); Dell iDRAC and DellOME for hardware management.
• Ability to provision IAM across OS and cloud (Active Directory, Google IAM, RBAC) under least- least-service models.
• Clear technical documentation skills (runbooks and TDD contributions); willingness to work business hours with on-call escalation in a global support model.
• Certifications — Required: GCP Professional Cloud Architect or GCP Associate Cloud Engineer).
• Beneficial: HashiCorp Terraform Associate, Red Hat RHCE, ITIL Foundation.

Tools Required

• Cloud & Environment: GCP (Compute Engine, Cloud Storage, VPC, IAM) for building and sustaining centralized security-application infrastructure.
• IaC & Orchestration: Terraform, Ansible, Puppet, Git, PowerShell, Bash, Python for automated deployment, configuration management and sustainment.
• Hardware & OS: Dell iDRAC, DellOME, Linux (RHEL / Ubuntu) and Windows Server
• Identity & Governance: Active Directory, Google IAM, RBAC for least-privilege access; Programme PM Workflow (BRD / TDD / Project Charter) for project governance.