Senior Cloud Infrastructure Engineer (AWS)

OpenKrill; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work

Career development

Meaningful work

Technical ownership

Professional growth

Job summary

OpenKrill is seeking a Senior Cloud Infrastructure Engineer to design, build, and operate secure, scalable cloud infrastructure supporting a healthcare credentialing platform. The role blends AWS, DevOps, and systems administration across cloud and on‑prem environments, with emphasis on automation, security, and reliability.

You will own Linux and Windows Server administration, CI/CD pipelines, container platforms, and certificate management while contributing to HITRUST/SOC 2 compliance and

Qualifications

• 5+ years of Cloud Engineering, DevOps, SRE, or Systems Administration.
• Bachelor's degree or equivalent practical experience.

Responsibilities

• Design, deploy, and operate secure AWS infrastructure.
• Automate infrastructure configuration and patch management.
• Manage container workloads with ECS and Rancher.
• Administer Linux and Windows Server environments.
• Maintain Nutanix hyperconverged infrastructure and DR readiness.
• Oversee email delivery via Postfix/SES and SSL/TLS management.

Skills

AWS

Linux

Windows Server

SRE

PowerShell

Bash

Python

CI/CD

Networking

Education

Bachelor's degree or equivalent

Tools

CloudFormation

AWS Systems Manager

ECS

Rancher (Cattle)

Nutanix Prism Element

Nutanix Prism Central

AHV

Postfix

Amazon SES

OpenSSL

Job description

Role Overview

The Senior Cloud Infrastructure Engineer will design, maintain, and optimize secure, scalable, and highly available cloud infrastructure supporting a healthcare credentialing platform. This hands‑on role combines AWS cloud engineering, DevOps, and systems administration, offering broad ownership across cloud and on‑premises environments. You will serve as the subject matter expert for Linux, container platforms, Nutanix infrastructure, email relay systems, and SSL/TLS certificate management. Working within a small, collaborative team, you will drive infrastructure automation, strengthen security, and improve system reliability and operational efficiency. You will also contribute to compliance initiatives, disaster recovery planning, and continuous improvement across a predominantly Windows‑based technology environment. This remote opportunity is ideal for a versatile engineer who enjoys solving complex technical challenges, adapting to changing priorities, and taking ownership of critical infrastructure.

Accountabilities

• Design, deploy, and operate secure, resilient, and highly available AWS infrastructure using services such as EC2, VPC, IAM, ECS, S3, RDS, Route 53, CloudWatch, and Systems Manager, following AWS Well‑Architected Framework principles.
• Optimize cloud infrastructure for security, performance, scalability, cost efficiency, and disaster recovery readiness.
• Manage infrastructure as code using AWS CloudFormation and support CI/CD pipelines for container builds, infrastructure changes, and application deployments.
• Operate containerized workloads on Amazon ECS and ECS Anywhere, and administer Rancher‑native Cattle clusters to ensure reliable application delivery.
• Serve as the Linux administration specialist, managing server provisioning, security hardening, patching, performance tuning, troubleshooting, and maintenance across physical, virtual, and cloud environments.
• Administer Windows Server infrastructure, including Active Directory, Group Policy, DNS, DHCP, and IIS, across on‑premises systems and AWS EC2 instances.
• Maintain and optimize on‑premises Nutanix hyperconverged infrastructure using Prism Element, Prism Central, and AHV, including virtual machine management, cluster health monitoring, capacity planning, upgrades, and data protection.
• Automate infrastructure configuration, system maintenance, and patch management using Python, PowerShell, Bash, and AWS Systems Manager.
• Manage SMTP relay infrastructure using Postfix and/or Amazon SES, ensuring reliable email delivery and maintaining SPF, DKIM, DMARC, and TLS configurations.
• Oversee SSL/TLS certificate lifecycle management, including certificate requests, installation, renewal, and troubleshooting across IIS, Linux web servers, Postfix, AWS Certificate Manager, and load balancers.
• Implement and maintain monitoring, logging, alerting, and incident response processes to strengthen system availability and operational reliability.
• Participate in on‑call rotations and troubleshoot infrastructure incidents, identifying root causes and implementing sustainable corrective actions.
• Support security and compliance requirements, including HITRUST and SOC 2 controls, by maintaining secure configurations, operational documentation, and appropriate infrastructure safeguards.
• Collaborate with technical and business stakeholders to prioritize infrastructure improvements, resolve operational challenges, and adapt to evolving business needs.
• Contribute across cloud engineering, systems administration, and technical support responsibilities as priorities shift within a small, generalist team.

Requirements

• At least 5 years of professional experience in Cloud Engineering, DevOps, Site Reliability Engineering (SRE), and/or Systems Administration, including at least 3 years supporting production workloads in AWS.
• A bachelor's degree in a related discipline or equivalent practical experience.
• Extensive hands‑on experience with AWS services, including EC2, VPC, IAM, ECS, S3, RDS, Route 53, CloudWatch, Systems Manager, and AWS security and networking best practices.
• Expert‑level Linux administration skills, including provisioning, hardening, patching, performance optimization, troubleshooting, and server maintenance.
• Strong Windows Server administration experience, particularly with Active Directory, Group Policy, DNS, DHCP and IIS.
• Practical experience managing Rancher‑native Cattle clusters, Amazon ECS, and ECS Anywhere in production or comparable environments.
• Demonstrated expertise in Nutanix hyperconverged infrastructure, including Prism Element, Prism Central, AHV, virtual machine administration, capacity management and cluster maintenance.
• Proficiency with infrastructure as code, particularly AWS CloudFormation, and experience supporting automated deployment and CI/CD workflows.
• Strong scripting and automation capabilities using PowerShell and Bash; Python development experience is highly desirable, particularly for AWS automation and integrations using tools such as boto3.
• Working knowledge of SMTP relay administration, including Postfix and/or Amazon SES, email authentication protocols, deliverability troubleshooting, and secure email transmission.
• Hands‑on experience with end‑to‑end SSL/TLS certificate management, including certificate signing requests (CSRs), certificate chains, OpenSSL, PEM/PFX formats, renewals and installation.
• Solid networking fundamentals, including TCP/IP, DNS, load balancing, VPNs, network troubleshooting and security groups.
• Familiarity with monitoring, logging, alerting, incident response, system reliability, backup strategies and disaster recovery practices.
• Understanding of infrastructure security and regulatory compliance requirements, with experience supporting HITRUST, SOC 2, HIPAA or other regulated environments considered an advantage.
• Strong troubleshooting, analytical and problem‑solving skills, with the ability to investigate complex infrastructure issues and deliver reliable solutions.
• Excellent written and verbal communication skills, along with the ability to work independently, collaborate remotely, and explain technical concepts clearly.
• A flexible, hands‑on approach to work, with the ability to manage multiple responsibilities and adapt to changing priorities across cloud infrastructure, systems administration and operational support.
• Relevant professional certifications are preferred, including AWS Solutions Architect, AWS SysOps Administrator, AWS DevOps Engineer, Red Hat, Linux Foundation, Microsoft or Nutanix certifications such as NCP‑MCI.
• Location requirement: Applicants must reside in one of the following U.S. states to be eligible for this remote position: Arizona, Colorado, Florida, Georgia, Illinois, Indiana, Kansas, Kentucky, Maryland, Massachusetts, Missouri, North Carolina, Ohio, Oklahoma, Pennsylvania, Tennessee, Utah, Virginia or Wisconsin.

Benefits

• Remote work: Fully remote working arrangement for candidates residing in the eligible U.S. states.
• Career development: Opportunities to expand expertise across cloud engineering, DevOps, infrastructure automation, Linux, Windows and enterprise systems.
• Meaningful work: The opportunity to support technology infrastructure that helps healthcare organizations improve provider data quality, credentialing, and compliance.
• Technical ownership: Broad responsibility across cloud and on‑premises infrastructure, with opportunities to influence architecture, security, automation and operational practices.
• Professional growth: Access to coaching, training and learning opportunities to support ongoing technical development and career progression.
• Flexible ca