Cloud Infrastructure Engineer

Platform Science

. Implement and maintain components of the multi-account AWS Landing Zone, including AWS Organizations, Control Tower, AFT, tagging standards, and permission boundaries .

Posted 11/3/2026full-timeRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing multi-account AWS environments, implementing Infrastructure as Code with Terraform, and ensuring cloud security and governance across AWS, Azure, and GCP. Proficient in cloud identity and access management, CI/CD automation, and optimizing cloud infrastructure for cost efficiency.

Highest-signal resume keywords

AWS Multi-Account Environment ManagementInfrastructure As Code (Terraform/Terragrunt)Cloud Identity And Access ManagementCI/CD Pipeline MaintenanceCloud Networking Fundamentals

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWSTerraformCloud Identity ManagementCI/CD AutomationPythonGoBashKubernetesLinux FundamentalsCloud Networking

Soft Skills

Strong Communication SkillsCollaboration Across TeamsIndependent Work

Tools & Technologies

AWS Control TowerOktaGitHub ActionsJenkinsMongoDB AtlasElastic CloudWizGuardDutyCrowdStrikeZscaler ZPA

Certifications & Qualifications

AWS CertificationAzure CertificationGCP CertificationTerraform CertificationKubernetes Certification

Industry Keywords

Cloud InfrastructureDevOpsSite Reliability EngineeringPlatform EngineeringFinOpsZero-Trust NetworkingDisaster RecoveryMulti-Cloud EnvironmentsSecurity ControlsBackup Capabilities

Tech Stack

Tools & technologies

AWSAzureCloudDNSGoogle Cloud PlatformJenkinsKubernetesLinuxMongoDBPythonTerraformGo

About the role

Key responsibilities & impact

Implement and maintain components of the multi-account AWS Landing Zone, including AWS Organizations, Control Tower, AFT, tagging standards, and permission boundaries
Support governance, security controls, observability, and backup capabilities across AWS, Azure, and GCP
Administer cloud identity and access management, including Okta federation, AWS IAM Identity Center, permission sets, group membership, and credential hygiene
Configure and maintain cloud networking components, including IP address management, VPC configuration, routing, transit connectivity, and DNS
Contribute to migrating workloads from public-internet exposure to private/zero-trust networking models
Build and maintain self-service infrastructure workflows for account provisioning, environment provisioning, and access requests
Execute backup, restore, and disaster recovery procedures across cloud regions and accounts; maintain and test DR runbooks
Build and maintain Terraform/Terragrunt modules consumed by engineering teams
Maintain CI/CD automation for cloud infrastructure
Investigate and remediate cloud security findings
Support FinOps initiatives by implementing cost optimization opportunities
Maintain documentation, runbooks, and operating procedures
Use AI coding agents in the engineering workflow while validating output and maintaining code review, testing, security, and production standards

Requirements

What you’ll need

5+ years of professional experience in Cloud Infrastructure, DevOps, Site Reliability Engineering, Platform Engineering, Systems Engineering, or a related infrastructure discipline (or equivalent combination of education and experience)
3+ years of hands-on experience with AWS or another major public cloud, with significant AWS experience strongly preferred
1+ years of Infrastructure as Code experience, preferably using Terraform and/or Terragrunt
Working experience within an AWS multi-account environment, including AWS Organizations, Control Tower, or comparable landing-zone architecture
Exposure to at least one additional major cloud platform, Azure or GCP, beyond a single workload
Experience building or maintaining Infrastructure as Code modules used by others
Hands-on experience with cloud identity and access management, including SSO, SAML federation, SCIM provisioning, IAM policies/roles, and permission boundaries
Solid cloud networking fundamentals, including IP address planning, VPC/VNet configuration, routing, DNS, and network security
Experience maintaining CI/CD pipelines, such as GitHub Actions or Jenkins
Scripting/programming experience with Python, Go, Bash, or similar
Strong Linux fundamentals
Working knowledge of Kubernetes and cloud-native infrastructure
Experience using AI coding agents or AI-assisted development tools, including validating generated code and identifying operational or security risk
Ability to work independently on well-defined infrastructure tasks and exercise judgment within established guidelines
Strong written and verbal communication skills; able to collaborate across Engineering, Security, and FinOps teams
Advanced English proficiency
Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related technical field + 5 years of experience; or equivalent combination of education and experience
Must reside in Brazil
Preferred qualifications include AWS Control Tower, AFT, AWS IPAM, Transit Gateway, Cloud WAN, multi-cloud environments, MongoDB Atlas, Elastic Cloud, Wiz, GuardDuty, CrowdStrike, Zscaler ZPA, Cloudflare WAF/DNS, certificate and PKI lifecycle basics, agentic automation pipelines, FinOps fundamentals, and relevant AWS/Azure/GCP/Terraform/Kubernetes certifications

Benefits

Comp & perks

No explicit benefits, perks, or compensation extras stated