Remote Cloud Engineer — AI-Driven AWS & Terraform

Knack; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Knack is seeking a Cloud Engineer to own and evolve scalable cloud infrastructure in a remote-friendly setup. You will harden systems to meet SOC 2, HIPAA, and customer security standards while guiding AI-enabled tooling that drafts and verifies Terraform changes.

You’ll join an AI-forward team that values responsible automation and measurable impact. You will manage AWS environments, design IAM controls, and build monitoring dashboards.

Qualifications

• 3-5 years in cloud infrastructure, DevOps, SRE, or platform engineering.
• 2+ years working in AWS production environments.
• Experience with Terraform and GitOps workflows preferred.

Responsibilities

• Run AWS infrastructure as code, with AI in the loop.
• Manage AWS infrastructure through Terraform using GitOps workflow, and resolve configuration drift across regions.
• Use AI tools to draft, review, and explain Terraform changes, then verify every plan before it merges.
• Maintain reusable modules and the standards that make AI-generated changes safe and consistent.
• Make AWS and Claude work together.
• Help design and operate how AI assistants work with our AWS environments, for investigation, analysis, incident triage, and infrastructure changes.
• Define the IAM roles, permission boundaries, logging, and approval gates that govern what AI tools can see and do.
• Evaluate AI access for blast radius and auditability.
• Implement security controls with our security lead
• Enforce encryption at rest and TLS in transit, tighten IAM and S3 permissions, manage WAF rules and security headers, and rotate secrets.
• Drive pentest and audit findings to verified fixes in every environment.
• Secure the AI tooling itself, including agent credentials, secrets handling, MCP server exposure, and prompt injection risk.
• Support compliance and audits
• Configure and maintain SOC 2 and HIPAA controls such as log retention, alarms, VPC flow logs, and backups.
• Ensure AI-assisted changes keep the same review, approval, and audit trail as any other change.
• Gather audit evidence and help maintain security tooling.
• Build monitoring, alerting, and runbooks
• Create dashboards and monitors that catch issues before customers do, and tune noisy alerts.
• Keep runbooks current and written so that both people and AI assistants can follow them.
• Keep systems patched and current
• Lead OS upgrades, runtime and end-of-life migrations, dependency updates, and certificate renewals.
• Operate and scale databases and customer environments
• Tune, resize, and secure databases on multiple platforms.
• Provision or decommission dedicated customer servers for Sales and Support.
• Resolve escalations and automate repeat work
• Troubleshoot production issues for Support, Sales, and Engineering.
• Replace recurring manual tasks with automation, CI/CD improvements, or self-service tooling, using AI to move faster while verifying what it produces.
• Participate in on-call
• Participate in our weekly 24/7 on-call rotation, responding to production alerts and following up with fixes or runbook updates so the same issue does not repeat.

Skills

Cloud infrastructure

DevOps practices

SRE concepts

Tools

AWS

Terraform

GitOps

IAM

Job description

Knack is seeking a Cloud Engineer to own and evolve scalable cloud infrastructure in a remote-friendly setup. You will harden systems to meet SOC 2, HIPAA, and customer security standards while guiding AI-enabled tooling that drafts and verifies Terraform changes.

You’ll join an AI-forward team that values responsible automation and measurable impact. You will manage AWS environments, design IAM controls, and build monitoring dashboards.