We are seeking a Senior Cloud Infrastructure Engineer to serve as the design lead for the Security Systems Infrastructure Engineering function on a large-scale enterprise security systems programme. This senior-level position owns the architecture of the cloud and virtualized infrastructure underpinning the enterprise’s physical security applications — designing high-availability topologies, identity and access models, and tiered storage strategies, and authoring the Business Requirements and Technical Design Documentation that guide the implementation team.
\n \nYou will act as the primary engineering-tier escalation point, mentor implementation engineers, and partner with sustainment, network engineering and programme governance to ensure resilient, secure and auditable infrastructure delivered against defined SLAs and KPIs.
\n \n \nKey Responsibilities
\n● Design and architect GCP environments (Compute Engine, Cloud Storage with retention
\npolicies, VPC networking) for centralized security applications, setting the standards
\nimplementation engineers execute.
\n \n● Architect virtualized on-premise and cloud-hosted infrastructure for Linux and Windows
\nenterprise operating systems.
\n \n● Design and own high-availability mechanisms — failover, hot-swap, cold-swap, clustering,
\ngeo-redundancy and load-balancing — across physical and virtual infrastructure.
\n \n● Define the infrastructure IAM model across OS (Windows / Linux) and environment (cloud /
\nVM / physical server) tooling, embedding least-privilege and least-service operational
\nsecurity.
\n \n● Design tiered storage and database architectures optimized for retention, uptime and
\nauditability, including backup / restore and audit-logging strategy.
\n \n● Establish orchestration and configuration-management standards using Terraform, Ansible,
\nPuppet, Git, PowerShell, DellOME and NetBox; set automation patterns in Python and Bash.
\n \n● Serve as the primary engineering-tier escalation point for operations and sustainment
\nfunctions when standard playbooks are exceeded.
\n \n● Monitor hardware and software product lifecycles; lead EOL evaluations and product
\nupgrade testing.
\n \n● Author Business Requirements Documents (BRDs), Technical Design Documentation
\n(TDDs) and runbooks from baseline; manage initiatives through the programme’s PM
\nWorkflow to align with SLAs and KPIs.
\n \n● Mentor and provide technical guidance to implementation (L2) engineers, conducting design
\nreviews and knowledge-transfer sessions to build team capability.
\n \nRequired Qualifications & Skills
\n● 8–12 years of progressive experience in cloud and enterprise infrastructure engineering,
\nincluding architecture and design ownership in production environments.
\n \n● Expert GCP architecture across Compute Engine, Cloud Storage, VPC and IAM, with
\ndemonstrated cloud-native high-availability design.
\n \n● Deep Infrastructure-as-Code mastery — Terraform and Ansible (mandatory) — plus Puppet,
\nGit, Bash, Python and PowerShell for orchestration and automation.
\n \n● Strong Linux and Windows enterprise OS administration and virtualization (VMware / Hyper-
\nV); Dell iDRAC and DellOME hardware management.
\n \n● IAM design across OS and cloud (Active Directory, Google IAM, RBAC) with least-privilege
\nenforcement; storage and database architecture including retention, backup/restore and
\naudit logging.
\n \n● Strong technical authoring (BRDs, TDDs, runbooks from baseline); network engineering
\nfundamentals to coordinate with the Network Engineering team.
\n \n● Certifications — Required: GCP Professional Cloud Architect. Strongly preferred: GCP
\nProfessional Cloud Security Engineer, GCP Professional Cloud DevOps Engineer.
\nBeneficial: Red Hat RHCE, HashiCorp Terraform Associate/Professional, ITIL Foundation.
\n \nTools Required
\n● Cloud & Environment: GCP (Compute Engine, Cloud Storage, VPC, IAM) for building and
\nsustaining centralized security-application infrastructure.
\n● IaC & Orchestration: Terraform, Ansible, Puppet, Git, PowerShell, Bash, Python for
\nautomated deployment, configuration management and sustainment.
\n● Hardware & OS: Dell iDRAC, DellOME, NetBox; Linux (RHEL / Ubuntu) and Windows
\nServer; VMware and Hyper-V virtualization.
\n● Identity & Governance: Active Directory, Google IAM, RBAC for least-privilege access;
\nProgramme PM Workflow (BRD / TDD / Project Charter) for project governance.
\n \nSalary Range
\n \n$85,120.00 - $134,400.00 USD (Salary)
\nPlease note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.
\nFurther, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.
\nAstreya offers comprehensive benefits to all Regular, Full-Time Employees, including:
\n \nMedical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only
\nDental provided through UHC
\nNationwide Vision provided by UHC
\nFlexible Spending Account for Health & Dependent Care
\nPre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
\nContinuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
\nCorporate Wellness Program provided by Goomi Group
\nEmployee Assistance Program
\nWellness Days
\n401k Plan
\nBasic and Supplemental Life Insurance
\nShort Term & Long Term Disability
\nCritical Illness, Critical Hospital, and Voluntary Accident Insurance
\nTuition Reimbursement (available 6 months after start date, capped)
\nPaid Time Off (accrued and prorated, maximum of 120 hours annually)
\nPaid Holidays
\nAny other statutory leaves, paid time, or other ancillary benefits required under state and federal law
...Customer Service Team Leader, Garment District New York, New York CHEF-IN-TRAINING Restaurant Team Member $17- $18 / hour depending on experience + $2-3/hour in tips + MORE BENEFITS! ABOUT THE ROLE: The next generation of chefs are evolving in DIG restaurants...
...Details Key Responsibilities: Implement UIL using Cloud Run and GKE hybrid deployment models for scalable,... ...10+ years in backend/integration development or cloud engineering. Deep expertise in Google Cloud Platform, especially: o Cloud Run, GKE, Pub/Sub...
...Job Description Job Description We are seeking a Garment Finisher to inspect, press, and quality-check dry-cleaned and laundered garments, with a focus on delicate and luxury items. This role operates form finishers and pressing machines to ensure garments meet quality...
...and creativity to transform complex subject matter into engaging educational experiences? Are you excited by the opportunity to explore AI-... ...consistent methodologies, standards, and best practices for adult and professional education.Own learning design governance and quality...
DescriptionSAIC is seeking a Google Cloud Engineer to provide SETA support to SAICs Program, Landmark in Chantilly, VA. Landmark is a large SETA program, supporting the NROs Ground Enterprise Directorate (GED), responsible for the acquisition of systems over the complete...