cloud engineer/Devops

Our client is seeking a highly skilled DevOps Cloud Engineer to own and advance the platforms, engineering practices, and governance capabilities that enable Infrastructure as Code (IaC), cloud infrastructure governance, and automated infrastructure delivery. This role is responsible for designing, building, and maintaining reusable infrastructure platforms, services, and deployment patterns that provide secure, repeatable, and audit-ready infrastructure delivery through version-controlled Terraform modules, ControlMonkey.io automation, infrastructure testing and validation, and governed change management processes.

The DevOps Cloud Engineer will partner across Infrastructure Services, DevOps, Cybersecurity, IAM, Enterprise Architecture, application teams, and Governance, Risk & Compliance to improve delivery consistency, traceability, resilience, operational efficiency, and regulatory compliance. This individual will also support team development by sharing standards, mentoring engineers on approved automation and cloud delivery practices, and helping build practical engineering capabilities across the organization.

Essential Functions

Infrastructure as Code (IaC) Engineering

• Engineer, maintain, test, and publish Infrastructure-owned Terraform modules and reusable infrastructure patterns.
• Manage ControlMonkey.io workspaces, deployment workflows, policy gates, release controls, and infrastructure automation standards.
• Maintain versioned infrastructure definitions that are repeatable, supportable, and recoverable across environments.
• Establish infrastructure testing, security scanning, validation, compliance verification, and drift detection practices before and after deployments.

Cloud Governance & Controls

• Implement preventive and detective infrastructure safeguards for security, cost management, tagging, logging, backup, networking, and approved AWS Region requirements in partnership with control owners.
• Maintain approved deployment paths that enforce peer review, authorized approvals, automated evidence collection, and traceable releases.
• Support segregation of duties by ensuring infrastructure changes undergo independent review and approval.
• Maintain emergency change procedures, exception records, approval histories, and audit evidence required for operational and compliance reviews.

Infrastructure Repository & Module Lifecycle Management

• Partner with DevOps teams to align Infrastructure-owned Terraform modules, automation assets, and platform code with enterprise standards for repository structures, branching strategies, merge request workflows, code ownership, artifact versioning, publication, and documentation.
• Define and maintain technical review standards, release criteria, rollback procedures, and lifecycle support processes for infrastructure modules, deployment patterns, and automation frameworks.
• Promote the adoption of approved modules, patterns, and platform capabilities to reduce duplication, configuration drift, and inconsistent implementations.

AWS Enablement & Operational Support

• Provide AWS infrastructure expertise, reference architectures, approved deployment patterns, onboarding guidance, and automation support.
• Partner with engineering teams to transition manual infrastructure processes into governed and automated deployment models.
• Monitor platform adoption, automation reliability, policy compliance, deployment traceability, infrastructure drift, and module reuse metrics.
• Identify recurring issues and implement improvements to modules, platform capabilities, controls, documentation, and delivery processes.

Cross-Functional Partnership

• Serve as the Infrastructure Services technical owner and liaison for infrastructure automation and cloud governance initiatives.
• Partner with DevOps teams on enterprise pipeline standards, shared modules, reusable infrastructure patterns, and engineering enablement efforts.
• Collaborate with Cybersecurity, IAM, Enterprise Architecture, application teams, and Governance, Risk & Compliance to align technical controls with enterprise requirements.

Additional Responsibilities

• Develop and maintain technical standards, runbooks, reference architectures, onboarding materials, and operational documentation supporting infrastructure automation, cloud governance, and infrastructure delivery platforms.
• Coach and mentor infrastructure engineers on Terraform, ControlMonkey.io, Git workflows, code review practices, infrastructure testing, and governed deployment methodologies.
• Build, support, and troubleshoot containerized application platforms and Kubernetes-based services, including deployment patterns, operational support, lifecycle management, and integration with infrastructure automation practices.
• Evaluate infrastructure automation capabilities and recommend improvements that strengthen controls, reliability, and delivery efficiency.
• Participate in architecture, change, risk, compliance, and operational reviews as the Infrastructure Services subject matter expert for Infrastructure as Code, automation, and cloud governance.
• Contribute to the evolution of reusable infrastructure modules, reference architectures, and platform capabilities that improve consistency, adoption, and operational maturity.
• Perform other duties as assigned., Vaco by Highspring and its parents, affiliates, and subsidiaries (“we,” “our,” or “Vaco by Highspring”) respects your privacy and are committed to providing transparent notice of our policies.
• California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here.
• Virginia residents may access our state specific policies here.
• Residents of all other states may access our policies here.
• Canadian residents may access our policies in English here and in French here.
• Residents of countries governed by GDPR may access our policies here.

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field; equivalent professional experience will be considered.
• 5+ years of experience in infrastructure engineering, cloud engineering, platform engineering, DevOps engineering, or a related technical discipline.
• Experience designing, implementing, and managing Infrastructure as Code solutions using Terraform.

Technical Skills

• Strong experience with Terraform, including module development, testing, versioning, and lifecycle management.
• Hands-on experience with AWS cloud services, governance controls, networking, logging, backup strategies, tagging standards, security practices, and cost optimization.
• Experience with containerized application platforms and Kubernetes-based services, including Amazon EKS and Amazon ECS.
• Experience with Git-based source control, pull request workflows, branching strategies, peer reviews, and infrastructure code lifecycle management.
• Experience implementing automation workflows supporting infrastructure provisioning, policy enforcement, security validation, and governed deployments.
• Knowledge of CI/CD pipelines, cloud-native infrastructure operations, and platform engineering best practices.
• Familiarity with ControlMonkey.io or similar infrastructure orchestration and governance platforms preferred.

Governance & Compliance

• Understanding of segregation of duties, change management processes, audit evidence requirements, exception management, and control frameworks.
• Experience working within regulated environments such as insurance, financial services, healthcare, or similar industries is preferred.
• Ability to translate security, compliance, operational, and reliability requirements into reusable technical controls and automation patterns.

Professional Skills

• Strong troubleshooting skills across infrastructure automation, deployment workflows, cloud platforms, and configuration management.
• Excellent analytical, documentation, communication, and collaboration skills.
• Ability to influence stakeholders, establish standards, and drive adoption across teams without direct authority.
• Passion for mentoring, knowledge sharing, and continuous improvement.
• Strong customer-service mindset with the ability to balance operational needs, governance requirements, and engineering efficiency.

Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to:

• the individual’s skill sets, experience and training;
• licensure and certification requirements;
• office location and other geographic considerations;
• other business and organizational needs.

With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.

Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring’s use of AI can be found here (https://www.highspring.com/ai-use-notices/). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client’s use of AI products in hiring.