Senior Cloud Infrastructure Engineer (AWS)

Accountabilities: Design, deploy, and operate secure, resilient, and highly available AWS infrastructure using services such as EC2, VPC, IAM, ECS, S3, RDS, Route 53, CloudWatch, and Systems Manager, following AWS Well-Architected Framework principles. Optimize cloud infrastructure for security, performance, scalability, cost efficiency, and disaster recovery readiness. Manage infrastructure as code using AWS CloudFormation and support CI/CD pipelines for container builds, infrastructure changes, and application deployments. Operate containerized workloads on Amazon ECS and ECS Anywhere, and administer Rancher-native Cattle clusters to ensure reliable application delivery. Serve as the Linux administration specialist, managing server provisioning, security hardening, patching, performance tuning, troubleshooting, and maintenance across physical, virtual, and cloud environments. Administer Windows Server infrastructure, including Active Directory, Group Policy, DNS, DHCP, and IIS, across on-premises systems and AWS EC2 instances. Maintain and optimize on-premises Nutanix hyperconverged infrastructure using Prism Element, Prism Central, and AHV, including virtual machine management, cluster health monitoring, capacity planning, upgrades, and data protection. Automate infrastructure configuration, system maintenance, and patch management using Python, PowerShell, Bash, and AWS Systems Manager. Manage SMTP relay infrastructure using Postfix and/or Amazon SES, ensuring reliable email delivery and maintaining SPF, DKIM, DMARC, and TLS configurations. Oversee SSL/TLS certificate lifecycle management, including certificate requests, installation, renewal, and troubleshooting across IIS, Linux web servers, Postfix, AWS Certificate Manager, and load balancers. Implement and maintain monitoring, logging, alerting, and incident response processes to strengthen system availability and operational reliability. Participate in on-call rotations and troubleshoot infrastructure incidents, identifying root causes and implementing sustainable corrective actions. Support security and compliance requirements, including HITRUST and SOC 2 controls, by maintaining secure configurations, operational documentation, and appropriate infrastructure safeguards. Collaborate with technical and business stakeholders to prioritize infrastructure improvements, resolve operational challenges, and adapt to evolving business needs. Contribute across cloud engineering, systems administration, and technical support responsibilities as priorities shift within a small, generalist team. Requirements At least 5 years of professional experience in Cloud Engineering, DevOps, Site Reliability Engineering (SRE), and/or Systems Administration, including at least 3 years supporting production workloads in AWS. A bachelor's degree in a related discipline or equivalent practical experience. Extensive hands-on experience with AWS services, including EC2, VPC, IAM, ECS, S3, RDS, Route 53, CloudWatch, Systems Manager, and AWS security and networking best practices. Expert-level Linux administration skills, including provisioning, hardening, patching, performance optimization, troubleshooting, and server maintenance. Strong Windows Server administration experience, particularly with Active Directory, Group Policy, DNS, DHCP, and IIS. Practical experience managing Rancher-native Cattle clusters, Amazon ECS, and ECS Anywhere in production or comparable environments. Demonstrated expertise in Nutanix hyperconverged infrastructure, including Prism Element, Prism Central, AHV, virtual machine administration, capacity management, and cluster maintenance. Proficiency with infrastructure as code, particularly AWS CloudFormation, and experience supporting automated deployment and CI/CD workflows. Strong scripting and automation capabilities using PowerShell and Bash; Python development experience is highly desirable, particularly for AWS automation and integrations using tools such as boto3. Working knowledge of SMTP relay administration, including Postfix and/or Amazon SES, email authentication protocols, deliverability troubleshooting, and secure email transmission. Hands-on experience with end-to-end SSL/TLS certificate management, including certificate signing requests (CSRs), certificate chains, OpenSSL, PEM/PFX formats, renewals, and installation. Solid networking fundamentals, including TCP/IP, DNS, load balancing, VPNs, network troubleshooting, and security groups. Familiarity with monitoring, logging, alerting, incident response, system reliability, backup strategies, and disaster recovery practices. Understanding of infrastructure security and regulatory compliance requirements, with experience supporting HITRUST, SOC 2, HIPAA, or other regulated environments considered an advantage. Strong troubleshooting, analytical, and problem-solving skills, with the ability to investigate complex infrastructure issues and deliver reliable solutions. Excellent written and verbal communication skills, along with the ability to work independently, collaborate remotely, and explain technical concepts clearly. A flexible, hands-on approach to work, with the ability to manage multiple responsibilities and adapt to changing priorities across cloud infrastructure, systems administration, and operational support. Relevant professional certifications are preferred, including AWS Solutions Architect, AWS SysOps Administrator, AWS DevOps Engineer, Red Hat, Linux Foundation, Microsoft, or Nutanix certifications such as NCP-MCI. Location requirement: Applicants must reside in one of the following U.S. states to be eligible for this remote position: Arizona, Colorado, Florida, Georgia, Illinois, Indiana, Kansas, Kentucky, Maryland, Massachusetts, Missouri, North Carolina, Ohio, Oklahoma, Pennsylvania, Tennessee, Utah, Virginia, or Wisconsin. Benefits

Remote work: Fully remote working arrangement for candidates residing in the eligible U.S. states. Career development: Opportunities to expand expertise across cloud engineering, DevOps, infrastructure automation, Linux, Windows, and enterprise systems. Meaningful work: The opportunity to support technology infrastructure that helps healthcare organizations improve provider data quality, credentialing, and compliance. Technical ownership: Broad responsibility across cloud and on-premises infrastructure, with opportunities to influence architecture, security, automation, and operational practices. Professional growth: Access to coaching, training, and learning opportunities to support ongoing technical development and career progression. Flexible career development: Opportunities to shape aspects of your career path and educational development according to your professional goals. Collaborative environment: Work within a small, adaptable technical team where knowledge sharing, initiative, and practical problem-solving are valued. Innovation and continuous improvement: Opportunities to contribute ideas, modernize infrastructure, improve processes, and implement new technical solutions. Community engagement: Opportunities to participate in community initiatives and activities that support positive social and environmental impact. Inclusive workplace: An equal opportunity environment that welcomes qualified applicants regardless of protected personal characteristics. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1