Senior Cloud Infrastructure Engineer

Trener; San Jose (CA); On-site; USD 170,000 - 250,000; Full time

Job summary

Trener is seeking a Senior Infrastructure Engineer to establish a deliberate multi-cloud foundation across GCP and AWS. You will own the Cloud Foundations layer: cloud account topology, IaC modules, state strategy, networking, Kubernetes foundations, and cross-provider access controls.

This is a senior individual contributor role. You will not manage people, and you will help shape standardized patterns while balancing provider-specific boundaries.

Qualifications

• Production cloud experience across multiple providers (at least two).
• Terraform/OpenTofu module authoring and state management experience.
• Multi-account/multi-project landing zones and guardrails design.
• Experience with infrastructure orchestration tools (Terragrunt/Terraspace).
• Strong networking, IAM, and Kubernetes foundation skills.

Responsibilities

• Own Cloud Foundations across GCP and AWS: topology, landing zones, policies.
• Manage cloud networking, including VPCs, DNS, and private connectivity.
• Develop and maintain Infrastructure as Code modules and patterns.
• Define state strategy and blast-radius boundaries across providers.
• Implement cloud IAM, workload identity, and access controls with Security.

Skills

Cloud foundations

Terraform/OpenTofu

Kubernetes operations

Networking

Python & Bash

Linux proficiency

Education

Bachelor's in CS or related field

Tools

Terraform

OpenTofu

Terragrunt

Terraspace

Job description

About Trener

Trener is building the software foundation for a new generation of industrial robotics.

We combine advanced AI, intuitive programming, and pre-trained skill models to make robots easier to deploy,

operate, and adapt to real-world industrial work. With teams in San Jose and Trondheim, we build software

that connects cloud infrastructure, developer platforms, and deployed robotic systems.

About the Role

We run a production cloud platform on Google Cloud today and are expanding our AWS footprint. We need a senior infrastructure engineer to help establish a deliberate multi-cloud foundation and define how GCP and AWS should coexist as the platform grows.

You will own the Cloud Foundations layer: cloud account and project structure, infrastructure-as-code, state strategy, networking, Kubernetes foundations, and implementation of cloud access controls. You will help decide where Trener should standardize across providers and where provider-specific architecture is the right boundary.

This is a senior individual contributor role. You will not be managing people, and you will not be inheriting a greenfield.

What You Will Own

• Cloud foundations across GCP and AWS - project and account topology, landing zones, organization policies, baseline guardrails, and enrollment of new environments.




• Cloud and cross-cloud networking - VPCs, routing, peering, DNS, load balancing, firewall policy, IP addressing, and private connectivity between cloud environments.




• Infrastructure as code - reusable Terraform/OpenTofu modules, environment composition, lifecycle management, and patterns that keep infrastructure understandable as the estate grows.




• State strategy and blast-radius boundaries - how infrastructure state is partitioned, how dependencies are expressed, and how those patterns evolve across providers.




• Cloud identity implementation - implement cloud IAM, workload identity, federation, and access controls in partnership with Security.




• Kubernetes foundations - cluster lifecycle, baseline configuration, upgrades, and shared infrastructure services beneath application workloads.




• Infrastructure cost visibility - implement the tagging, labeling, budgets, alerts, and reporting needed to make cloud spend understandable and surface obvious infrastructure waste.




• Infrastructure controls supporting our SOC 2 program - resource labeling, access boundaries, configuration standards, and evidence-producing infrastructure practices.

Requirements

• Proven experience operating production infrastructure as a cloud, infrastructure, platform, or site reliability engineer.




• Terraform or OpenTofu at module-authoring depth - writing and versioning reusable modules, managing state across environments, and handling the lifecycle of real infrastructure over time.




• Cloud foundation design experience - multi-account, multi-project, landing-zone, guardrail, IAM, or network architecture beyond a handful of isolated workloads.




• Experience with infrastructure composition or orchestration - Atmos, Terragrunt, Terraspace, or an equivalent approach to managing reusable infrastructure across environments.




• Strong networking depth - VPCs, routing, peering, DNS, TLS, load balancing, firewall policy, IP addressing, and connectivity troubleshooting.




• Kubernetes working knowledge - cluster operations, RBAC, networking, shared services, and troubleshooting workloads that will not start or communicate correctly.




• Helm chart authoring, not just chart installation.




• Production cloud experience across at least two major providers, or deep experience with one plus substantial hands- on involvement extending an organization into another.




• Python and Bash for automation, CLIs, diagnostics, and glue.




• Linux fluency.




• Experience with controlled infrastructure environments - SOC 2, HIPAA, HITRUST, FedRAMP, PCI, or similar security/compliance expectations.




• Fluency in English and strong written communication. Architectural decisions here are expected to be documented and reviewed in writing

Experience That Will Help You Succeed

• GitOps workflows across multiple environments and comfort operating infrastructure through reviewed, auditable changes.




• Externalized secrets management and Kubernetes-native secret delivery patterns.




• Operating Prometheus/Grafana/Loki or comparable observability tooling as an infrastructure consumer and operator.




• Experience introducing or formalizing a second cloud, including a clear account of what you would repeat and what you would change.




• Cloud identity federation and workload identity across providers.




• Disaster-recovery, regional resilience, or high-availability infrastructure work.




• Private cloud networking or overlay connectivity.

What We Offer

The opportunity to work at the intersection of robotics, AI, and cloud infrastructure. A senior technical role with meaningful influence over the foundations on which the company builds.

A growing international engineering organization with teams in the United States and Norway