Staff Cloud Infrastructure Engineer

We are seeking a Staff Cloud Infrastructure Engineer to play a key role in designing, optimizing, and securing the underlying cloud infrastructure that powers our organization’s cloud environments. As we continue to transform, consolidate, and evolve our cloud environments, this role will be instrumental in architecting scalable, secure, automated, and resilient infrastructure, ensuring seamless workload migration, and integrating new cloud environments into our ecosystem.

With a focus on core cloud infrastructure, including networking, identity and access management, security, storage, compute, and cross-cloud integrations, you will collaborate closely with peers in security, development, and other areas of the platform engineering team to ensure our cloud environment adheres to best practices, governance frameworks, and automation-first principles.

What You Will Do:

• Design, implement, and optimize cloud-native infrastructure using best practices for security, scalability, and high availability
• Integrate newly acquired cloud environments into the organization’s cloud footprint, ensuring security and consistency
• Develop and implement hybrid-cloud and cross-cloud connectivity strategies to ensure interoperability
• Architect, optimize, and maintain secure network infrastructure in Azure, AWS, & GCP - including DNS, routing, and low-latency cross-cloud communication
• Collaborate with security teams to enforce Zero Trust networking, IAM, and data encryption standards, as well as general security framework adherence
• Maintain and expand a modular network security edge that provides for integration testing among development teams while remaining flexible enough to unify additional environments as M&A requires
• Automate cloud infrastructure provisioning using Terraform and Ansible, writing IaC that supports Simple, Secure, and Scalable deployments
• Implement policy-based automation (AWS SCPs, Azure Policy) to maintain governance across cloud environments
• Support observability teams with infrastructure monitoring and alerting using CloudWatch, Datadog, and Log Analytics
• Drive transformation and standardization of our foundational infrastructure services as the environment evolves and the business grows, including optimizing processes, developing policies, and enabling secure, self-service infrastructure for our engineering partners

• 10+ years of experience in cloud infrastructure engineering, platform engineering, or infrastructure architecture
• Strong expertise in cloud infrastructure, including networking, security, compute, storage, and IAM
• Experience migrating workloads from on-prem to cloud and integrating new cloud environments into existing architectures
• Deep understanding of multi-cloud networking (AWS VPCs, Azure VNets, Transit Gateway, ExpressRoute, PrivateLink, DNS, hybrid connectivity)
• Hands-on experience with Infrastructure as Code and automation cloud infrastructure (Terraform and Ansible)
• Strong security knowledge, including IAM, encryption, network security, PKI, certificate management, and compliance frameworks (SOC2, HITRUST, NIST, FedRAMP)
• Experience managing multi-account cloud governance and security policies (AWS Organizations, Azure Policy, SCPs)
• Excellent problem-solving skills, with the drive to bring clarity to vague situations and a desire to constantly expand your skills
• Strong communication skills, including the ability to describe complex problems to non-technical staff, paired with the curiosity, adaptability, and flexibility needed to navigate a growing enterprise
• Experience leveraging AI agents to accelerate daily workload
• Competency with the following technologies:
• Compute: Azure VMs, EC2, VMware vSphere
• Network security: Azure (VNets, NSG, AGW); AWS (VPC, TGW, Peering, SG, ALB, NLB); NextGen FW, VPN
• Storage: Azure Files & Blob, Amazon S3, AWS FSxN
• Automation: Ansible Automation Platform, Terraform, GitHub
• Core: Windows & Linux, DNS / IPAM, Active Directory
• Observability: Datadog, CloudWatch, Azure Log Analytics, Aria
• IAM: Azure Roles, AWS IAM

What Helps You Stand Out:

• Group Policy, PowerShell, CIFS & NFS storage protocol, Palo Alto, F5
• Deep knowledge of cloud services, containerization, and/or Kubernetes
• Experience driving environment consolidation and integration, bringing order to disparate hybrid and multi-cloud architectures as the business grows
• Experience driving technical initiatives end-to-end
• Knowledge of multi-region architecture and disaster recovery strategies
• Background in cloud cost optimization and FinOps methodologies
• Experience with cloud-native identity management (AWS IAM Identity Center, Entra ID, RBAC)

Datavant is the data collaboration platform trusted for healthcare. Guided by our mission to make the world’s health data secure, accessible and actionable, we provide critical data solutions for organizations across the healthcare ecosystem - including providers, health plans, researchers, and life sciences companies. From fulfilling a single patient’s request for their medical records to powering the AI revolution in healthcare, Datavanters are building the future of how data is connected and used to improve health.

By joining Datavant today, you’re stepping onto a driven and highly collaborative team that is passionate about creating transformative change in healthcare., Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here (https://www.datavant.com/eeo-commitment-statement) . Know Your Rights (https://www.eeoc.gov/know-your-rights-workplace-discrimination-illegal) , explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay.