Senior Cloud Infrastructure Engineer

What the Senior Cloud Infrastructure Engineer Does Each Day:

• Lead the technical architecture, engineering standards, roadmap, and lifecycle direction for Quva's private cloud, Azure, and AWS environments
• Provide direct engineering support for existing private-cloud tenants, including compute, storage, networking, identity integration, monitoring, backup, recovery, and infrastructure troubleshooting
• Design, implement, and govern Azure and AWS infrastructure using scalable, secure, repeatable patterns aligned with business and application requirements
• Serve as an internal Azure/AWS technical resource and escalation point for cloud infrastructure incidents, complex changes, migrations, integrations, and performance issues
• Develop and maintain infrastructure-as-code and automation practices using technologies such as Terraform, Bicep/ARM, AWS CloudFormation, PowerShell, Python, Azure DevOps, or GitHub Actions, as appropriate to Quva standards
• Partner with Cybersecurity to integrate cloud identity, privileged access, network security, logging, vulnerability management, endpoint/workload protections, and security monitoring into cloud architecture
• Architect and maintain cloud connectivity and network services, including virtual networks/VPCs, routing, DNS, VPN/private connectivity, load balancing, firewalls/security groups, and hybrid-cloud integration
• Implement and maintain standards for cloud observability, monitoring, alerting, log collection, backup, disaster recovery, resilience, and capacity/performance management
• Contribute technical expertise to workload migration planning, landing-zone design, cloud adoption, tenant/account/subscription structure, and application infrastructure modernization
• Implement cloud governance controls covering access, resource organization, tagging, configuration standards, policy enforcement, change control, documentation, and operational readiness
• Monitor and optimize cloud utilization and spend through rightsizing, lifecycle management, reservations/savings approaches where appropriate, resource cleanup, and cost visibility; partner with IT leadership on cloud cost governance
• Support the technical oversight of MSP-delivered cloud services. Review designs, validate engineering decisions, coordinate escalations, and confirm that services align with Quva architecture, security, resiliency, and support requirements
• Maintain architecture diagrams, technical standards, runbooks, inventories, support documentation, recovery procedures, and institutional knowledge for Quva’s cloud platforms
• Participate in incident response, root-cause analysis, problem management, change management, and disaster-recovery testing for infrastructure and cloud services
• Collaborate with application, security, data, business systems, and infrastructure teams to translate business requirements into supportable technical solutions
• Provide technical guidance and knowledge transfer to internal IT team members while reducing reliance on provider-specific institutional knowledge
• Establish clear technical ownership across Quva-operated and provider-operated cloud services, including architecture, IAM, networking, automation, monitoring, security, backup/disaster recovery, and optimization
• Define technical acceptance criteria for MSP projects and operational changes and validate solutions before production handoff
• Review MSP incidents, recurring problems, service performance, technical debt, security findings, and optimization opportunities; drive corrective actions to closure
• Ensure Quva retains current architecture documentation, administrative knowledge, configuration visibility, and recovery information necessary to independently oversee its environments
• Partner with Procurement, Finance, Security, and IT leadership as appropriate to evaluate technical scope, service consumption, licensing, capacity, and provider performance

Our Most Successful Senior Cloud Infrastructure Engineer has / is:

• Cloud Architecture and Engineering
• Hybrid Infrastructure
• Automation and Infrastructure as Code
• Cloud Security and Identity Integration
• Reliability, Backup and Disaster Recovery
• FinOps and Cost Optimization
• Technical Vendor and MSP Governance
• Incident and Problem Resolution
• Documentation and Knowledge Management
• Cross-Functional Technical Leadership

Minimum Requirements for this Role:

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field
• 7+ years of progressive infrastructure, systems, cloud, or platform engineering experience, including 3+ years of hands-on production cloud engineering in Azure and/or AWS and demonstrated leadership of complex technical initiatives
• Demonstrated experience supporting hybrid environments that integrate on-premises/private-cloud infrastructure with public cloud services
• Strong knowledge of cloud networking, identity and access management, compute, storage, monitoring, backup/recovery, high availability, and disaster-recovery concepts
• Hands-on experience with infrastructure-as-code, scripting, configuration automation, and CI/CD practices for infrastructure deployment
• Experience working with managed-service providers, consulting partners, or outsourced infrastructure teams, with the ability to independently evaluate technical designs and provider recommendations
• Working knowledge of cloud security concepts, least-privilege access, logging/monitoring, vulnerability remediation, encryption, secrets management, and secure configuration practices
• Ability to troubleshoot complex issues across cloud, network, identity, operating system, application dependency, and provider boundaries
• Familiarity with ITIL-aligned incident, problem, change, configuration, and service-management practices
• Strong technical documentation, communication, vendor-management, and cross-functional collaboration skills
• 18+ years of age
• Able to successfully complete a drug and background check
• Must be currently authorized to work in the United States on a full-time basis; Quva is not able to sponsor applicants for work visas

Any of the Following Will Give You an Edge:

• Experience supporting regulated, pharmaceutical, healthcare, manufacturing, or other highly controlled environments
• Microsoft Certified: Azure Administrator Associate, Azure Solutions Architect Expert, or comparable Azure credentials
• AWS Certified Solutions Architect or SysOps Administrator certification
• Experience with Terraform and enterprise landing-zone or cloud-governance frameworks
• Experience with Microsoft Entra ID, Azure Monitor, Log Analytics, Azure Policy, Microsoft Defender for Cloud, AWS IAM, CloudWatch, CloudTrail, AWS Organizations, or comparable cloud-management services