Cloud Infrastructure Engineer
Platform Science2 months ago
Brazil (city not specified)Senior
Responsibilities
- Implement and maintain multi-account AWS Landing Zone components, including AWS Organizations, Control Tower, AFT, tagging standards, and permission boundaries.
- Support cloud governance, security controls, observability, backup, and shared services across AWS, Azure, and GCP.
- Administer cloud identity and access management using Okta federation, AWS IAM Identity Center, permission sets, group membership, and credential hygiene.
- Configure and maintain IP address management, VPC networking, routing, transit connectivity, DNS, and private or zero-trust networking models.
- Build and maintain self-service account, environment, and access-request workflows.
- Execute and test backup, restore, and disaster recovery procedures across cloud regions and accounts.
- Build and maintain Terraform and Terragrunt modules used by engineering teams.
- Maintain CI/CD automation for cloud infrastructure and remediate cloud security findings.
- Implement identified cloud cost optimization opportunities and maintain documentation, runbooks, and operating procedures.
- Use AI coding agents while validating generated output and retaining ownership of code review, testing, security, and production outcomes.
Requirements
- At least 5 years of professional experience in cloud infrastructure, DevOps, site reliability engineering, platform engineering, systems engineering, or a related infrastructure discipline.
- At least 3 years of hands-on experience with AWS or another major public cloud, with significant AWS experience preferred.
- At least 1 year of infrastructure-as-code experience, preferably with Terraform or Terragrunt.
- Experience with AWS multi-account environments, landing zones, infrastructure-as-code modules used by others, cloud IAM, SSO, SAML federation, SCIM provisioning, IAM policies and roles, permission boundaries, cloud networking, and CI/CD pipelines.
- Exposure to at least one additional major cloud platform beyond a single workload, such as Azure or GCP.
- Scripting or programming experience with Python, Go, Bash, or similar; strong Linux fundamentals; and working knowledge of Kubernetes and cloud-native infrastructure.
- Experience using AI coding agents or AI-assisted development tools, including validating generated code and identifying operational or security risks.
- Ability to work independently within established guidelines and collaborate across Engineering, Security, and FinOps teams.
- Advanced English proficiency and residence in Brazil.
- Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related technical field plus 5 years of experience, or an equivalent combination of education and experience.
- Preferred experience includes AWS Control Tower, AFT, AWS IPAM, Transit Gateway, Cloud WAN, managed data platforms, cloud security platforms, zero-trust networking, Cloudflare WAF and DNS, certificate and PKI lifecycle management, agentic automation, FinOps, and relevant cloud or infrastructure certifications.
Benefits
- The role is a senior individual contributor position on the CloudOps team.
- The position requires residence in Brazil.
Tech Stack
Categories
About Platform Science
Platform Science builds an open IoT and software platform for commercial fleets to manage in-cab devices, telematics, ELD compliance, and third-party applications. It sells SaaS and platform services to trucking and transportation operators, vehicle OEMs, and app developers, providing tools to develop, deploy, and secure apps across vehicles. Founded in 2015 and headquartered in San Diego, the company is privately held and partners with manufacturers and equipment providers across the supply chain.