Cloud Infrastructure Engineer III

Astreya; Boulder (CO); On-site; USD 85,000 - 134,000; Full time

Benefits offered by this job

Medical through UHC

Dental through UHC

Vision through UHC

Flexible Spending Account

Tuition Reimbursement

Paid Time Off

Paid Holidays

Job summary

Astreya seeks a Senior Cloud Infrastructure Engineer to lead the design of our security systems infrastructure on a large-scale enterprise programme in Boulder, CO. You will own cloud and virtualization architecture, implement high-availability, and guide engineering teams through BRDs and TDDs.

Responsibilities include defining IAM, storage, backup, and audit strategies, plus mentoring L2 engineers and ensuring SLAs/KPIs are met with robust governance and automation across Windows, Linux, and

Qualifications

• 8–12 years of progressive experience in cloud and enterprise infrastructure engineering, including architecture and design ownership in production environments.
• Expert GCP architecture across Compute Engine, Cloud Storage, VPC and IAM, with demonstrated cloud-native high-availability design.
• Deep Infrastructure-as-Code mastery — Terraform and Ansible (mandatory) — plus Puppet, Git, Bash, Python and PowerShell for orchestration and automation.
• Strong Linux and Windows enterprise OS administration and virtualization (VMware / Hyper‑V); Dell iDRAC and DellOME hardware management.
• IAM design across OS and cloud (Active Directory, Google IAM, RBAC) with least-privilege enforcement; storage and database architecture including retention, backup/restore and audit logging.
• Strong technical authoring (BRDs, TDDs, runbooks from baseline); network engineering fundamentals to coordinate with the Network Engineering team.
• Certifications — Required: GCP Professional Cloud Architect. Strongly preferred: GCP Professional Cloud Security Engineer, GCP Professional Cloud DevOps Engineer.
• Beneficial: Red H​at RHCE, HashiCorp Terraform Associate/Professional, ITIL Foundation.

Responsibilities

• Design and architect GCP environments (Compute Engine, Cloud Storage with retention policies, VPC networking) for centralized security applications, setting the standards implementation engineers execute.
• Architect virtualized on-premise and cloud-hosted infrastructure for Linux and Windows enterprise operating systems.
• Design and own high-availability mechanisms — failover, hot-swap, cold-swap, clustering, geo-redundancy and load-balancing — across physical and virtual infrastructure.
• Define the infrastructure IAM model across OS (Windows / Linux) and environment (cloud / VM / physical server) tooling, embedding least-privilege and least-service operational security.
• Design tiered storage and database architectures optimized for retention, uptime and auditability, including backup / restore and audit-logging strategy.
• Establish orchestration and configuration-management standards using Terraform, Ansible, Puppet, Git, PowerShell, DellOME and NetBox; set automation patterns in Python and Bash.
• Serve as the primary engineering-tier escalation point for operations and sustainment functions when standard playbooks are exceeded.
• Monitor hardware and software product lifecycles; lead EOL evaluations and product upgrade testing.
• Author Business Requirements Documents (BRDs), Technical Design Documentation (TDDs) and runbooks from baseline; manage initiatives through the programme’s PM Workflow to align with SLAs and KPIs.
• Mentor and provide technical guidance to implementation (L2) engineers, conducting design reviews and knowledge-transfer sessions to build team capability.

Skills

Cloud Infra Design

GCP Architecture

IaC: Terraform

IaC: Ansible

Scripting: Python

Windows/Linux Admin

VMware/Hyper-V

IAM Design

Documentation

Networking Basics

Tools

Terraform

Ansible

Puppet

Git

PowerShell

Bash

Python

Dell iDRAC

DellOME

Job description

We are seeking a Senior Cloud Infrastructure Engineer to serve as the design lead for the Security Systems Infrastructure Engineering function on a large-scale enterprise security systems programme. This senior-level position owns the architecture of the cloud and virtualized infrastructure underpinning the enterprise’s physical security applications — designing high-availability topologies, identity and access models, and tiered storage strategies, and authoring the Business Requirements and Technical Design Documentation that guide the implementation team.

You will act as the primary engineering-tier escalation point, mentor implementation engineers, and partner with sustainment, network engineering and programme governance to ensure resilient, secure and auditable infrastructure delivered against defined SLAs and KPIs.

Key Responsibilities

• Design and architect GCP environments (Compute Engine, Cloud Storage with retention policies, VPC networking) for centralized security applications, setting the standards implementation engineers execute.
• Architect virtualized on-premise and cloud-hosted infrastructure for Linux and Windows enterprise operating systems.
• Design and own high-availability mechanisms — failover, hot-swap, cold-swap, clustering, geo-redundancy and load-balancing — across physical and virtual infrastructure.
• Define the infrastructure IAM model across OS (Windows / Linux) and environment (cloud / VM / physical server) tooling, embedding least-privilege and least-service operational security.
• Design tiered storage and database architectures optimized for retention, uptime and auditability, including backup / restore and audit-logging strategy.
• Establish orchestration and configuration-management standards using Terraform, Ansible, Puppet, Git, PowerShell, DellOME and NetBox; set automation patterns in Python and Bash.
• Serve as the primary engineering-tier escalation point for operations and sustainment functions when standard playbooks are exceeded.
• Monitor hardware and software product lifecycles; lead EOL evaluations and product upgrade testing.
• Author Business Requirements Documents (BRDs), Technical Design Documentation (TDDs) and runbooks from baseline; manage initiatives through the programme’s PM Workflow to align with SLAs and KPIs.
• Mentor and provide technical guidance to implementation (L2) engineers, conducting design reviews and knowledge-transfer sessions to build team capability.

Required Qualifications & Skills

• 8–12 years of progressive experience in cloud and enterprise infrastructure engineering, including architecture and design ownership in production environments.
• Expert GCP architecture across Compute Engine, Cloud Storage, VPC and IAM, with demonstrated cloud-native high-availability design.
• Deep Infrastructure-as-Code mastery — Terraform and Ansible (mandatory) — plus Puppet, Git, Bash, Python and PowerShell for orchestration and automation.
• Strong Linux and Windows enterprise OS administration and virtualization (VMware / Hyper‑V); Dell iDRAC and DellOME hardware management.
• IAM design across OS and cloud (Active Directory, Google IAM, RBAC) with least-privilege enforcement; storage and database architecture including retention, backup/restore and audit logging.
• Strong technical authoring (BRDs, TDDs, runbooks from baseline); network engineering fundamentals to coordinate with the Network Engineering team.
• Certifications — Required: GCP Professional Cloud Architect. Strongly preferred: GCP Professional Cloud Security Engineer, GCP Professional Cloud DevOps Engineer.
• Beneficial: Red H​at RHCE, HashiCorp Terraform Associate/Professional, ITIL Foundation.

Tools Required

• Cloud & Environment: GCP (Compute Engine, Cloud Storage, VPC, IAM) for building and sustaining centralized security-application infrastructure.
• IaC & Orchestration: Terraform, Ansible, Puppet, Git, PowerShell, Bash, Python for automated deployment, configuration management and sustainment.
• Hardware & OS: Dell iDRAC, DellOME, NetBox; Linux (RHEL / Ubuntu) and Windows Server; VMware and Hyper‑V virtualization.
• Identity & Governance: Active Directory, Google IAM, RBAC for least-privilege access; Programme PM Workflow (BRD / TDD / Project Charter) for project governance.

Salary Range

$85,120.00 - $134,400.00 USD (Salary)

• Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.
• Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.

Astreya offers comprehensive b** enefits to all Regular, Full-Time Employees, **** including:

• Medical provided throughUHC(PPO, HSA,Surestoptions) / Medical provided through Kaiser (HMO option only) for California employees only
• Dental provided throughUHC
• Nationwide Vision provided byUHC
• Flexible Spending Account for Health & Dependent Care
• Pre-Tax Account for Commuter Benefit/Parking & Transit (location‑specific)
• Continuing Education and Professional Development via various integrated platforms, e.g.Udemy and Coursera
• Corporate Wellness Programprovided by Goomi Group
• Employee Assistance Program
• Wellness Days
• Basic and Supplemental Life Insurance
• Short Term & Long Term Disability
• Critical Illness, Critical Hospital, and Voluntary Accident Insurance
• Tuition Reimbursement (available 6 months after start date, capped)
• Paid Time Off (accrued and prorated, maximum of 120 hours annually)
• Paid Holidays
• Any other statutory leaves, paid time, or otherancillarybenefits required under state and federal law