Cloud Infrastructure Systems Engineer

Provide expert-level design, implementation, enhancement, engineering, and operational support for enterprise infrastructure, with a strong focus on hybrid cloud (Azure and AWS), automation, and modern DevOps practices. Help transition our on-prem datacenter into a modern hybrid public/private cloud architecture with an emphasis on Infrastructure as Code ( IaC ) and configuration management pipelines. Help prepare, maintain , and transition internal infrastructure to SaaS platforms where needed. Lead initiatives to integrate and automate systems using Terraform, IaC , and scripting languages to ensure secure, scalable, and resilient solutions aligned with cloud adoption and well-architected principles., Hybrid Cloud Architecture & Operations: Azure + AWS + OnPrem

• Architect, implement, and operate core cloud foundations (networking, identity, security controls, and baseline services) in both clouds.

• Design and operate landing zone foundations and guardrails (identity, network topology, policy/controls, logging/monitoring, and account/subscription organization).

• Define and enforce governance and access controls (least privilege, role-based access, and policy/controls ), and keep guardrails consistent across environments.

• Integrate on-prem infrastructure with cloud services for hybrid identity, networking, workload migration, and SaaS adoption.

• Optimize cost management, observability, and performance tuning for cloud-hosted and hybrid workloads.

• Apply well-architected practices to improve reliability, security, performance, and operational excellence.

Terraform & Infrastructure as Code ( IaC )

• Design, develop, and maintain Terraform modules for provisioning and managing cloud and hybrid infrastructure.

• Implement IaC best practices to automate deployment, configuration, and lifecycle management of resources across environments.

• Build reusable templates and automation pipelines for consistent, scalable infrastructure delivery.

• Enforce infrastructure changes through code review and CI/CD pipelines to reduce drift and improve auditability.

• Version and validate Terraform modules with automated checks and clear change documentation to support safe reuse.

Configuration Management & Platform Automation

• Build and maintain configuration management pipelines and baselines for Linux and Windows (example tooling: Ansible, DSC, or equivalent).

• Automate routine operations, reporting, and remediation using scripting, configuration-as-code patterns, and cloud-native tooling.

• Standardize platform build patterns (golden images, baseline hardening, repeatable environment builds) across cloud and on-prem.

Automation & Scripting

• Develop and maintain automation scripts in Python and PowerShell for system administration, monitoring, and integration tasks.

• Build operational automation to reduce toil and improve reliability (health checks, drift detection, remediation, and compliance reporting).

API Integration

• Build, consume, and integrate REST APIs for automation, monitoring, and third-party service integration.

• Enable interoperability between cloud platforms, identity providers, and enterprise applications.

Core Infrastructure, Compute, Storage, and Backup

• Provide expert-level administration for ADLDS/LDAP, Active Directory, Microsoft Entra ID (Azure AD), Microsoft Certificate Authority, IAM integrations, and hybrid identity patterns.

• Oversee administration and performance of Linux/Unix (RHEL/Oracle Linux preferred) and Microsoft Windows systems, both on-premises and in the cloud.

• Operate and modernize on-prem compute platforms (VMware and OLVM/KVM) and integrate them into hybrid cloud patterns.

• Partner across storage and backup platforms to ensure backup, recovery, immutability, and resilience controls align to platform standards.

• Design, establish , and maintain technical standards and security policies for core infrastructure and cloud environments.

• Engineer holistic certificate management systems for on-premises and hybrid cloud environments.

Operations, Support, and Engineering Hygiene

• Triage and remediate P1/P2 incidents, document work in ITSM tooling, and drive restoration steps and follow-through.

• Own and drive root cause analysis (RCA) and problem records to closure, including corrective actions and prevention steps.

• Participate in change management and quality gates for platform changes; ensure changes have clear implementation and backout plans.

• Maintain runbooks, SOPs, and operational documentation; update after incidents and platform changes.

• Coordinate vendor support cases as needed and drive issues to resolution., Upbound/Acima/Brigit are equal opportunity employers committed to ensuring that all employment decisions are made on a non-discriminatory basis, and without regard to actual or perceived race .

Do you have experience in Windows?, Do you have a Bachelor's degree?, * Bachelor's degree in Computer Science , Information Systems, Engineering, or a related technical field (or equivalent work experience).

• 7+ years in systems or platform engineering, including enterprise-scale public cloud experience (Azure and AWS).

• Strong experience designing and operating hybrid environments and multi-cloud patterns in both clouds.

• Deep expertise in Terraform and IaC best practices (working knowledge of Bicep/ARM is a plus).

• Experience building and operating CI/CD pipelines, GitOps workflows, and policy-as-code patterns.

• Strong configuration management and automation experience (Linux and Windows).

• Advanced scripting skills in Python and PowerShell.

• Experience building and integrating REST APIs for automation and monitoring.

• Strong background in identity and access management, including Microsoft Entra ID (Azure AD), Active Directory, LDAP, certificate services, and cloud IAM concepts.

• Solid understanding across Windows Server, Linux/Unix, and hybrid identity solutions.

• Proven ability to lead infrastructure projects, work cross-functionally, and mentor engineers.

PREFERRED CERTIFICATIONS/EXPERIENCE

• Certifications: Azure Solutions Architect, Terraform Associate, Microsoft Certified: Identity and Access Administrator.

• Strong hands-on experience with storage, SAN, backup solutions, and disaster recovery planning.

• Experience with VMware and OLVM/KVM platforms in production environments.

• Experience managing and monitoring Kubernetes and Docker runtimes.

• Experience migrating services to SaaS platforms and operating hybrid integration patterns.

• Experience with multi-account governance patterns and landing zone operations.

Pulled from the full job description

• Tuition reimbursement

• Health insurance

• 401(k) matching

• Vision insurance

• 401(k) 5% Match

• Health savings account

• Dental insurance, * Competitive compensation

• Full health benefits-Medical/Dental/Vision

• 401(k) match, (5%/4%)

• DTO (discretionary time off)

• Health savings account (HSA) with company contribution

• College tuition reimbursement program (STEM degrees)

• Unlimited use of LinkedIn Learning

• On-site gym and showers

• Free car charging and covered parking

Join us at the forefront of digital innovation, where your work will directly impact the future of financial accessibility and consumer experiences across retail, e - commerce , and fintech.

Upbound Group, Inc. (effective February 27, 2023: NASDAQ: UPBD) is an omni-channel platform company committed to elevating financial opportunity for all through innovative, inclusive, and technology-driven financial solutions that address the evolving needs and aspirations of consumers. The Company's customer-facing operating units include industry-leading brands such as Acima, Rent-A-Center, and Brigit that facilitate consumer transactions across a wide range of store-based and digital retail channels, including over 2,400 company branded retail units across the United States, Mexico and Puerto Rico. Upbound Group, Inc. is headquartered in Plano, Texas., Upbound Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.