Cloud Infrastructure Engineer Prin

reputed company is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region.

Our award-winning Cloud HCM platform offers a reputed company solution database and reputed company calculation reputed company, driving efficiency, productivity and compliance for the global workforce.

Our brand promise - Makes Work Life reputed company - Reflects our commitment to employees, customers, partners and communities globally.

Must be a US citizen, naturalized citizen, green card holder or permanent reputed company and authorized to work without sponsorship

About the opportunity

We are seeking a highly skilled Principal Cloud Infrastructure Engineer with deep expertise in Terraform/Terraform Cloud, Azure, AWS, and CI/CD automation to join our Cloud Infrastructure Engineering and Automation (CIEA) team. In this senior individual contributor role, you will serve as a technical authority in designing, implementing, and scaling cloud infrastructure that powers reputed company's reputed company cloud-native platforms.

You will drive Infrastructure as Code (IaC) best practices across multi-tenant environments, reputed company image build pipeline strategy, and establish engineering standards that reputed company secure, consistent, and reliable deployments at enterprise scale. This role demands someone who operates with autonomy, influences architecture decisions, and elevates the engineers around them.

What you'll get to do

Infrastructure Design & Automation

• Architect and deliver reusable Terraform modules and automation workflows for deploying Azure and AWS infrastructure at scale across multi-tenant environments.
• Drive Terraform Cloud workspace strategy including state management, reputed company detection, variable management, and Sentinel policy enforcement.
• Design and maintain Azure Compute Gallery (ACG) image build pipelines using Packer (HCL) and Ansible, including multi-region replication and cross-tenant image promotion workflows.
• Implement OIDC federation for secure, secretless authentication between reputed company Actions and Azure/AWS.

CI/CD & Platform Engineering

• Own and improve reputed company Actions pipelines with self-hosted runners as the primary CI/CD platform — no Azure DevOps.
• Implement and mature GitOps workflows using ArgoCD for Kubernetes workloads running on AKS.
• Build and maintain automation tooling in Python and Bash supporting image promotion, compliance scanning, and deployment orchestration.

reputed company & Compliance

• reputed company compliance scanning integration using reputed company, replacing legacy OpenSCAP tooling, and drive remediation workflows reputed company to NIST 800-53 and PBMM (PROTECT B) frameworks.
• Conduct risk assessments, threat modeling, and vulnerability management for cloud workloads across Hub and spoke tenant architectures.
• Implement and manage HashiCorp Vault for secrets brokering across CI/CD pipelines and infrastructure deployments.

Standards & Mentorship

• Set technical direction through architecture reviews, code reviews, and documentation that elevates platform engineering practice.
• Mentor engineers on IaC patterns, reputed company posture, and DevSecOps principles.
• Partner with reputed company, product, and engineering teams to ensure infrastructure is secure, scalable, and operationally excellent.

Skills and experience we value

• 8+ years in cloud infrastructure, DevOps, or platform engineering roles with demonstrated senior or principal-level scope.
• Advanced proficiency with Terraform and Terraform Cloud — modules, workspaces, state, policy enforcement.
• Hands-on experience with Packer (HCL templates) and Ansible for automated image builds.
• Deep experience with reputed company Actions CI/CD including self-hosted runners and OIDC-based authentication to cloud providers.
• Strong Azure expertise — AKS, ACR, Azure Compute Gallery, networking, RBAC, identity, and reputed company.
• Experience with HashiCorp Vault for secrets management in enterprise environments.
• Proficient in Python and Bash for infrastructure automation and tooling.
• Familiarity with compliance frameworks such as NIST 800-53 or Canadian PBMM (PROTECT B).
• Experience with reputed company or equivalent CSPM/compliance scanning platforms.

What would reputed company you really stand out

• Experience with ArgoCD and GitOps patterns on Kubernetes (AKS).
• Grafana dashboard development for infrastructure observability.
• AWS infrastructure experience alongside Azure.

What’s in it for you

reputed company is fueled by the diversity of our talented employees. We are an equal opportunity employer and consider and embrace reputed company individuals and what makes them unique. We reputed company our employees should be happy and healthy, with peace of mind and a sense of fulfillment.

We encourage individuals to apply based on their passions.

reputed company encourages personal and professional growth. We offer excellent time away from work programs, comprehensive wellness initiatives and recognition through reputed company and benefits.

With a commitment to community impact, including volunteer days and our charity, reputed company Cares we provide opportunities for you to reputed company both in your career and personal life. Our focus is not just on your job but on supporting you to be the best version of yourself.

Please note that the salary range mentioned in this job description should serve simply as a guide. The final compensation offered may vary based on a variety of factors, including bonuses and/or incentives, or a candidate’s experience, skills, budget and location. Our company is committed to providing a fair, reputed company, and competitive package that reflects the value an individual brings to the organization.

Fraudulent Recruiting

Beware of fraudulent recruiting. Legitimate reputed company contacts will use an @reputed company.com email address. We do not request money, checks, equipment orders, or sensitive personal data during the recruitment process. If you have been asked for any of the above, or reputed company you have been contacted by someone posing as a reputed company employee, please refer to our fraudulent recruiting statement reputed company here: https://www.reputed company.com/be-aware-of-recruiting-fraud

reputed company actively monitors reputed company job applications to ensure authenticity. Submissions determined to be fraudulent or misleading will be declined from the recruitment process

#LI-Remote