Senior Cloud Operations Engineer

dragos; United States; Remote; USD 165,000 - 190,000; Full time

Benefits offered by this job

Remote-first

Equity package

Benefits plan

Job summary

Hidden Jobs is seeking a senior cloud operations engineer to own the operational health of a multi-cloud customer fleet spanning Azure, AWS, and GCP. You will drive infrastructure-as-code standards with Terraform and apply SRE practices to keep production telemetry flowing reliably for mission-critical customers.

Responsibilities include lifecycle management, fleet standardization, and cross-account access controls, with on-call duties and audit support for FedRAMP and SOC2.

Qualifications

• 4+ years hands-on cloud operations across major providers.
• Terraform proficiency for infrastructure-as-code.
• Experience at scale: fleet management, patching, upgrades, drift detection.
• IAM, networking, and Datadog observability.
• SRE practices including on-call and post-incident reviews.
• FedRAMP, SOC2, or NIST CSF audit evidence knowledge.

Responsibilities

• Operate and continuously improve a multi-cloud fleet across Azure, AWS, and GCP, including customer-managed environments.
• Own the full customer environment lifecycle: onboarding, configuration, version upgrades, patching, drift detection, and offboarding.
• Build and maintain Terraform-based infrastructure-as-code for provisioning and fleet standardization.
• Design multi-tenant isolation patterns, RBAC at scale, and cross-account access controls across providers.
• Configure cloud networking components (VPCs/VNets, peering, transit gateways, DNS, firewalls, load balancers) and manage cloud-to-OT/on-prem connectivity.
• Maintain IAM, secrets management, and Datadog observability (monitors, dashboards, log pipelines, SLOs).
• Participate in an on-call rotation; drive SRE practices (SLOs, error budgets, runbooks, post-incident reviews).
• Support audit and compliance evidence collection for frameworks such as FedRAMP and SOC2

Skills

Cloud operations

Terraform

Networking

IAM

Datadog

Python

Bash

SRE practices

Tools

Terraform

Datadog

GitHub Actions

Job description

Role overview

A senior engineering role focused on the operational health of a multi-cloud customer fleet spanning Azure, AWS, and GCP. The position owns the full environment lifecycle, drives infrastructure-as-code standards, and applies SRE practices to keep production telemetry flowing reliably for mission-critical customers.

Responsibilities

• Operate and continuously improve a multi-cloud fleet across Azure, AWS, and GCP, including customer-managed environments
• Own the full customer environment lifecycle: onboarding, configuration, version upgrades, patching, drift detection, and offboarding
• Build and maintain Terraform-based infrastructure-as-code for provisioning and fleet standardization
• Design multi-tenant isolation patterns, RBAC at scale, and cross-account access controls across providers
• Configure cloud networking components (VPCs/VNets, peering, transit gateways, DNS, firewalls, load balancers) and manage cloud-to-OT/on-prem connectivity
• Maintain IAM, secrets management, and Datadog observability (monitors, dashboards, log pipelines, SLOs)
• Participate in an on-call rotation; drive SRE practices (SLOs, error budgets, runbooks, post-incident reviews)
• Support audit and compliance evidence collection for frameworks such as FedRAMP and SOC2

Requirements

• 4+ years of hands-on cloud operations experience across one or more major providers
• Strong proficiency with Terraform for infrastructure-as-code
• Experience operating cloud environments at scale: fleet management, patching, upgrades, drift detection
• Solid knowledge of cloud networking (VPCs/VNets, peering, transit gateways, DNS, firewalls, hybrid connectivity)
• Hands-on IAM experience across AWS, Azure Entra ID, and/or GCP (roles, policies, federation, SSO)
• Datadog proficiency for monitoring, alerting, dashboards, and log pipelines
• Comfort with on-call duties and incident response, including blameless post-mortems
• Strong scripting skills in Python and/or Bash
• Familiarity with FedRAMP, SOC2, or NIST CSF and audit evidence collection

Nice to have

• Experience across all three major providers, plus customer-facing environment management
• Cybersecurity background and familiarity with cloud-to-OT/ICS connectivity and segmentation
• Secrets management tooling (Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager)
• Cloud-native fleet tools (AWS Systems Manager, Azure Arc, GCP Fleet Management)
• Policy-as-code (OPA, Sentinel, AWS SCPs, Azure Policy), FinOps, CSPM tooling
• CI/CD pipeline authoring with GitHub Actions

Benefits and work setup

Remote-first position. Base salary of $165,000 with a competitive equity package and a comprehensive benefits plan.