Senior Cloud Infrastructure Architect – GCP & Security

Astreya; Boulder (CO); On-site; USD 85,000 - 134,000; Full time

Benefits offered by this job

Medical through UHC

Dental through UHC

Vision through UHC

Flexible Spending Account

Tuition Reimbursement

Paid Time Off

Paid Holidays

Job summary

Astreya seeks a Senior Cloud Infrastructure Engineer to lead the design of our security systems infrastructure on a large-scale enterprise programme in Boulder, CO. You will own cloud and virtualization architecture, implement high-availability, and guide engineering teams through BRDs and TDDs.

Responsibilities include defining IAM, storage, backup, and audit strategies, plus mentoring L2 engineers and ensuring SLAs/KPIs are met with robust governance and automation across Windows, Linux, and

Qualifications

• 8–12 years of progressive experience in cloud and enterprise infrastructure engineering, including architecture and design ownership in production environments.
• Expert GCP architecture across Compute Engine, Cloud Storage, VPC and IAM, with demonstrated cloud-native high-availability design.
• Deep Infrastructure-as-Code mastery — Terraform and Ansible (mandatory) — plus Puppet, Git, Bash, Python and PowerShell for orchestration and automation.
• Strong Linux and Windows enterprise OS administration and virtualization (VMware / Hyper‑V); Dell iDRAC and DellOME hardware management.
• IAM design across OS and cloud (Active Directory, Google IAM, RBAC) with least-privilege enforcement; storage and database architecture including retention, backup/restore and audit logging.
• Strong technical authoring (BRDs, TDDs, runbooks from baseline); network engineering fundamentals to coordinate with the Network Engineering team.
• Certifications — Required: GCP Professional Cloud Architect. Strongly preferred: GCP Professional Cloud Security Engineer, GCP Professional Cloud DevOps Engineer.
• Beneficial: Red H​at RHCE, HashiCorp Terraform Associate/Professional, ITIL Foundation.

Responsibilities

• Design and architect GCP environments (Compute Engine, Cloud Storage with retention policies, VPC networking) for centralized security applications, setting the standards implementation engineers execute.
• Architect virtualized on-premise and cloud-hosted infrastructure for Linux and Windows enterprise operating systems.
• Design and own high-availability mechanisms — failover, hot-swap, cold-swap, clustering, geo-redundancy and load-balancing — across physical and virtual infrastructure.
• Define the infrastructure IAM model across OS (Windows / Linux) and environment (cloud / VM / physical server) tooling, embedding least-privilege and least-service operational security.
• Design tiered storage and database architectures optimized for retention, uptime and auditability, including backup / restore and audit-logging strategy.
• Establish orchestration and configuration-management standards using Terraform, Ansible, Puppet, Git, PowerShell, DellOME and NetBox; set automation patterns in Python and Bash.
• Serve as the primary engineering-tier escalation point for operations and sustainment functions when standard playbooks are exceeded.
• Monitor hardware and software product lifecycles; lead EOL evaluations and product upgrade testing.
• Author Business Requirements Documents (BRDs), Technical Design Documentation (TDDs) and runbooks from baseline; manage initiatives through the programme’s PM Workflow to align with SLAs and KPIs.
• Mentor and provide technical guidance to implementation (L2) engineers, conducting design reviews and knowledge-transfer sessions to build team capability.

Skills

Cloud Infra Design

GCP Architecture

IaC: Terraform

IaC: Ansible

Scripting: Python

Windows/Linux Admin

VMware/Hyper-V

IAM Design

Documentation

Networking Basics

Tools

Terraform

Ansible

Puppet

Git

PowerShell

Bash

Python

Dell iDRAC

DellOME

Job description

Astreya seeks a Senior Cloud Infrastructure Engineer to lead the design of our security systems infrastructure on a large-scale enterprise programme in Boulder, CO. You will own cloud and virtualization architecture, implement high-availability, and guide engineering teams through BRDs and TDDs.

Responsibilities include defining IAM, storage, backup, and audit strategies, plus mentoring L2 engineers and ensuring SLAs/KPIs are met with robust governance and automation across Windows, Linux, and