Cloud Infrastructure Engineer L2 / Cloud Engineer II

Astreya; Boulder (CO); On-site; USD 120,000 - 180,000; Full time

Job summary

Astreya is seeking a Cloud Infrastructure Engineer to design, deploy and manage cloud, virtualization and physical server infrastructure for its enterprise security stack. The role emphasizes hands‑on work across GCP, iDRAC, OS imaging and automation, with a focus on reliability and security in a fast‑paced environment.

You will implement scalable, HA architectures, automate provisioning, manage patch compliance and maintain accurate inventory while collaborating with senior engineers and

Qualifications

• 5 to 8 years of hands‑on experience in cloud and enterprise infrastructure engineering, with demonstrated delivery in production environments.
• Working proficiency in GCP core services — Compute Engine, Cloud Storage, VPC and IAM — and cloud‑native high‑availability patterns.
• Hands‑on Infrastructure as Code with Terraform and Ansible, in production, not in a lab only.
• Scripting competency in either of Python, Bash or PowerShell.
• Strong Windows Server administration, including patch management and update automation at fleet scale.
• Strong Linux administration (RHEL or Ubuntu).
• Server lifecycle experience: Dell server platforms, iDRAC out‑of‑band management, firmware baselines, OS imaging and automated build.
• Virtualization administration (VMware or Hyper‑V).
• IAM provisioning across operating system and cloud (Active Directory, Google IAM, RBAC) under least‑privilege enforcement.
• Vulnerability management and patch compliance practice: running scans, interpreting findings, driving remediation, and reporting coverage.
• Clear technical documentation: runbooks, configuration records and TDD contributions.
• Based in or able to work from Boulder, Colorado, with willingness to work business hours and participate in on‑call escalation in a global support model.

Responsibilities

• Implement and configure GCP environments per design standards.
• Own end‑to‑end server provisioning: OS imaging, build automation, iDRAC configuration and registration, asset and inventory registration, handover to operations.
• Qualify new Dell server SKUs and OS builds for the approved hardware catalog, including firmware baselines and driver validation.
• Build and maintain on‑premises and cloud infrastructure across Linux and Windows client and enterprise operating systems.
• Deploy high‑availability mechanisms and validate redundancy behavior after implementation.
• Operate Windows Update and patch automation across the corporate server fleet; remediate patching compliance exceptions.
• Execute continuous vulnerability scanning and remediation across the server fleet and projects; track findings to closure.
• Maintain infrastructure inventory accuracy in the program inventory and source‑of‑truth systems.
• Author and maintain Infrastructure as Code using Terraform and Ansible; contribute to orchestration and configuration management through Puppet, Git and PowerShell.
• Automate routine provisioning and sustainment tasks to reduce manual effort and configuration drift.
• Provision and administer infrastructure IAM across operating systems and cloud, enforcing least‑privilege and least‑service models.
• Configure tiered storage and database resources in line with retention, uptime and auditability requirements.
• Apply device and infrastructure security hardening to hosts supporting physical security products.
• Provide implementation‑tier support for escalations from operations; escalate design‑level issues to L3 with detailed handover notes.
• Produce and maintain runbooks, configuration records and Technical Design Documentation (TDD) artifacts.

Skills

GCP core services

Terraform

Ansible

Python

Bash

PowerShell

Windows Server administration

Linux administration

Dell iDRAC

VMware/Hyper-V

RBAC/IAM provisioning

Vulnerability management

Documentation

Tools

Terraform

Ansible

Puppet

Dell iDRAC

VMware

Hyper-V

NetBox

Job description

The Cloud Infrastructure Engineer builds and sustains the cloud, virtualized and physical server infrastructure that runs the enterprise physical security estate like cameras, access control, readers, intercoms and the servers. This is a hands-on implementation role. Working from the architecture and standards set by the senior and principal engineers, you will deploy GCP environments, provision and image physical servers, automate configuration through Terraform and Ansible, administer Linux and Windows systems, maintain patch and vulnerability compliance across the fleet, and keep infrastructure inventory accurate. The role suits an engineer who is equally comfortable with cloud-native services and with the operating system, firmware and hardware management layers beneath them.

Key Responsibilities

• Implement and configure GCP environments (Compute Engine, Cloud Storage with retention policies, VPC networking, IAM) for centralized security applications, working to the design standards set by L3 and L4 engineers.
• Own end-to-end server provisioning: OS imaging, build automation, iDRAC configuration and registration, asset and inventory registration, and handover to operations.
• Qualify new Dell server SKUs and operating system builds for the approved hardware catalog, including firmware baselines and driver validation.
• Build and maintain virtualized on-premises and cloud-hosted infrastructure across Linux and Windows client and enterprise operating systems.
• Deploy high-availability mechanisms (failover, hot-swap and cold-swap, clustering, load-balancing) and validate redundancy behavior after implementation.
• Operate Windows Update and patch automation across the corporate server fleet; remediate patching compliance exceptions and report on coverage.
• Execute continuous vulnerability scanning and remediation across the server fleet and GCP development, UAT and production projects; track findings to closure against program SLAs.
• Maintain infrastructure inventory accuracy in the program inventory and source-of-truth systems, reconciling discovered state against recorded state.
• Author and maintain Infrastructure as Code using Terraform and Ansible; contribute to orchestration and configuration management through Puppet, Git and PowerShell.
• Automate routine provisioning and sustainment tasks to reduce manual effort and configuration drift.
• Provision and administer infrastructure IAM across operating systems and cloud, enforcing least-privilege and least-service models.
• Configure tiered storage and database resources in line with retention, uptime and auditability requirements.
• Apply device and infrastructure security hardening to the hosts supporting physical security products such as camera management, access control and device management platforms.
• Provide implementation-tier support for escalations from operations and sustainment teams, escalating design-level issues to L3 with detailed handover notes.
• Produce and maintain runbooks, configuration records and Technical Design Documentation (TDD) artifacts.

Mandatory Skills

Candidates must demonstrate the following to be considered.

• 5 to 8 years of hands‑on experience in cloud and enterprise infrastructure engineering, with demonstrated delivery in production environments.
• Working proficiency in GCP core services — Compute Engine, Cloud Storage, VPC and IAM — and cloud‑native high‑availability patterns.
• Hands‑on Infrastructure as Code with Terraform and Ansible, in production, not in a lab only.
• Scripting competency in either of Python, Bash or PowerShell
• Strong Windows Server administration, including patch management and update automation at fleet scale.
• Strong Linux administration (RHEL or Ubuntu).
• Server lifecycle experience: Dell server platforms, iDRAC out‑of‑band management, firmware baselines, OS imaging and automated build.
• Virtualization administration (VMware or Hyper‑V).
• IAM provisioning across operating system and cloud (Active Directory, Google IAM, RBAC) under least‑privilege enforcement.
• Vulnerability management and patch compliance practice: running scans, interpreting findings, driving remediation, and reporting coverage.
• Clear technical documentation: runbooks, configuration records and TDD contributions.
• Based in or able to work from Boulder, Colorado, with willingness to work business hours and participate in on‑call escalation in a global support model.

Good‑to‑Have Skills

These strengthen an application but will not screen a candidate out.

• Puppet and DellOME for configuration management and hardware fleet management.
• NetBox or a comparable source‑of‑truth or DCIM platform.
• Experience supporting physical security systems: camera management platforms, access control systems, or IoT device management.
• Exposure to enterprise endpoint management tooling (SCCM, Intune, WSUS or equivalent).
• Tiered storage and database configuration against retention, uptime and auditability requirements.
• Experience working inside a formal program governance model with SLAs and KPIs.

Certifications

Level

Certification

Required

GCP Associate Cloud Engineer, or GCP Professional Cloud Architect

Preferred

HashiCorp Terraform Associate; Microsoft Windows Server certification

Beneficial

Red Hat RHCSA or RHCE; ITIL 4 Foundation