Remote Cloud Engineer - AWS/Terraform + AI Security

pofft Technology Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Knack, a remote-first AI-powered no-code platform, is hiring a Cloud Engineer to own and evolve infrastructure across global regions, with SOC 2 and HIPAA considerations. You’ll work with Terraform, AWS, and AI tooling to secure, automate, and scale cloud infrastructure while supporting AI capabilities.

The role includes a weekly 24/7 on-call rotation and requires coordination with teams across time zones; US-based candidates or international contractors with overlap hours are welcome.

Responsibilities

• Run AWS infrastructure as code, with AI in the loop.
• Manage AWS infrastructure through Terraform using a GitOps workflow and resolve drift across regions.
• Use AI tools to draft, review, and explain Terraform changes, then verify every plan before it merges.
• Maintain reusable modules and ensure AI-generated changes are safe and consistent.
• Design and operate how AI assistants interact with AWS environments for investigation and incident triage.
• Define IAM roles, permission boundaries, logging, and gates for AI tool access.
• Evaluate AI access for blast radius and auditability.
• Enforce encryption at rest and TLS in transit; tighten IAM/S3 permissions and manage WAF rules.
• Drive pentest and audit findings to verified fixes in all environments.
• Secure AI tooling, including credentials, secrets handling, and prompt injection risk.
• Configure SOC 2 and HIPAA controls such as log retention, alarms, and backups.

Skills

GitOps

Security mindset

Tools

Terraform

AWS

IAM

WAF

Job description

Knack, a remote-first AI-powered no-code platform, is hiring a Cloud Engineer to own and evolve infrastructure across global regions, with SOC 2 and HIPAA considerations. You’ll work with Terraform, AWS, and AI tooling to secure, automate, and scale cloud infrastructure while supporting AI capabilities.

The role includes a weekly 24/7 on-call rotation and requires coordination with teams across time zones; US-based candidates or international contractors with overlap hours are welcome.