Senior Cloud Infrastructure Enginee...

About the Role

We are seeking a Senior Cloud Infrastructure Engineer to own the design, resilience, and daily health of HealthEdge's infrastructure across AWS and our hybrid on-prem/Azure/GCP environment. This role bridges cloud engineering and traditional infrastructure, spanning migration execution (AWS primary), disaster recovery, patch management, security compliance (HIPAA/SOC 2), and active legacy retirement efforts.

Key Responsibilities

• Hybrid Cloud Architecture: Design secure baselines for OS images and on-prem hardware. Manage multi-cloud infrastructure (AWS/Azure/GCP) while supporting the transition from legacy on-prem datacenters to modern cloud-native services.
• Infrastructure as Code: Build reusable, auditable IaC solutions using Terraform/CDK/CloudFormation for both cloud deployments and remaining server estates. Execute VPC provisioning, networking connectivity standards, and storage management strategies during workload migration.
• Disaster Recovery & Resilience: Architect DR solutions across all environments, maintain backup strategies, conduct regular drills to identify gaps, and treat recoverability as a core requirement rather than an afterthought.
• Security & Compliance: Lead vulnerability management triage, threat detection reviews, PHI/PII scanning coordination, penetration testing support, and security exception approvals. Ensure audit readiness for HIPAA and SOC 2 through rigorous change freeze coordination and evidence collection.
• Cloud Operations: Implement least-privilege IAM controls across multi-account environments. Manage compute resources with a focus on cost optimization (FinOps) and right-sizing. Operate load balancers, DNS services, and security groups while monitoring infrastructure health via native and third-party observability tools.
• System Administration: Administer Linux/Windows Server environments at scale, including patching, performance tuning, Active Directory integration, Group Policy management, and certificate lifecycle handling. Harden OS-level security baselines across the estate.
• CI/CD & Automation: Evolve CI/CD pipelines for secure, repeatable deployments using Python/Bash/PowerShell automation to reduce manual toil and enforce consistency from proof-of-concept through production.
• Reliability Engineering: Monitor, scale, and maintain production systems with availability as a top priority. Serve as L2 escalation point during on-call rotations, lead root cause analysis (RCA), author pressure-tested runbooks, and drive incident retrospectives to closure.

Leverage AI for Efficiency

Utilize AI coding assistants to accelerate IaC development and scripting workflows. Apply AI tooling to generate initial drafts of runbooks, DR documentation, and incident reports, validating outputs before publication.

Cost Governance & Collaboration

• Identify cost anomalies, enforce enterprise tagging standards, and make pragmatic tradeoffs between performance, resilience, and spend (FinOps).

We value engineers who raise risks early in ambiguous environments, demonstrate strong ownership to close gaps rather than escalate waiting for others, communicate technical trade-offs clearly to stakeholders, and maintain rigorous documentation that holds up under pressure.