Senior Cloud Engineer

Insight Global; Atlanta (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

Insight Global is seeking a senior cloud architect to own the cloud foundation for the AI platform, including account structure, network topology, identity model, multi-region deployment, and governance to keep cloud spend predictable as the platform scales for clients.

You will design infrastructure that is secure by default, reproducible, and scalable, enabling enterprise customers to run the platform within their own clouds—without requiring custom, one-off builds each time.

Qualifications

• 7+ years of cloud engineering experience with at least one major cloud platform
• Strong background in network design at scale
• Hands-on experience with cloud IAM and cross-account access
• Experience building multi-region systems with defined RTO/RPO
• Expertise in Infrastructure as Code (Terraform or Pulumi)

Responsibilities

• Own the cloud foundation and account structures for the platform
• Define topology connecting internal services, customer environments, and partners
• Own cloud IAM and enforce least-privilege access and federation
• Design multi-region deployment, failover, and DR with tested targets
• Ensure data residency and compliance with auditability
• Create repeatable deployment patterns for customers running in their clouds
• Own cloud security posture with threat detection and audit logging

Skills

AWS

Azure

GCP

Network design at scale

Terraform

Pulumi

Crossplane

IAM

Multi-region architecture

Hybrid connectivity

Security tooling

Tools

Terraform

Pulumi

Crossplane

Job description

You will own the cloud foundation the AI platform runs on—including account structure, network topology, identity model, multi-region deployment strategy, and financial governance to keep cloud spend predictable as the platform scales across clients.

You’ll design infrastructure that is secure by default, reproducible, and scalable, while enabling enterprise customers to deploy the platform within their own cloud environments—without requiring custom, one-off builds each time.

Key Responsibilities

• Own the cloud foundation
• Design and maintain account structures, organizational hierarchies, and baseline configurations that provide a secure, governed, and scalable environment. Enable consistent and safe provisioning of new environments.
• Define topology connecting internal services, customer environments, and partners. Ensure proper tenant isolation, private connectivity, and scalability across multi-region and multi-cloud environments.
• Own cloud identity & access management (IAM)
• Establish secure authentication models for services and users. Enforce least-privilege access and enable secure identity federation with enterprise customers.
• Drive multi-region and resilience strategy
• Design deployment topology, failover mechanisms, and disaster recovery processes. Ensure RTO and RPO targets are defined, tested, and reliable.
• Ensure data residency and compliance
• Implement infrastructure-level controls to guarantee data remains within specified geographic boundaries, with auditability built in.
• Create repeatable, scalable deployment patterns that allow customers to run the platform in their own cloud environments without forking infrastructure code.
• Own cloud security posture
• Implement and manage threat detection, compliance, and audit logging at the cloud layer. Ensure security is embedded into the platform foundation—not added later.

Required Qualifications

• 7+ years of cloud engineering experience, with deep expertise in at least one major cloud platform (AWS, Azure, or GCP) and working knowledge of another
• Strong background in network design at scale, including:
• Direct Connect / ExpressRoute
• DNS and certificate management
• Hands-on experience with cloud IAM:
• Role and policy design
• Cross-account access
• Federated identity
• Least-privilege enforcement
• Experience building and operating multi-region systems, with defined and tested RTO/RPO targets
• Expertise in Infrastructure as Code (Terraform or Pulumi) across multi-account, multi-environment deployments with safe promotion and rollback strategies
• Experience with cloud-native security tooling, such as:
• AWS: GuardDuty, Security Hub, CloudTrail
• Azure: Defender for Cloud
• GCP: Security Command Center

Preferred Qualifications

• Strong multi-cloud expertise (e.g., AWS + Azure or GCP at depth, not just familiarity)
• Experience with hybrid connectivity:
• BGP routing
• Direct Connect or ExpressRoute
• Advanced cloud certifications (e.g., AWS Solutions Architect Professional, Azure Solutions Architect Expert, Google Cloud Professional Architect)
• Experience with confidential computing or trusted execution environments
• Contributions to open-source infrastructure tools (e.g., Terraform providers, Pulumi packages, Crossplane)