Senior Cloud Operations Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Operate, maintain, and enhance the Dragos cloud fleet across Azure, AWS, and GCP.

• Take ownership of the complete customer environment lifecycle, which includes onboarding, configuration, upgrades, and offboarding.

• Develop and manage Terraform-based infrastructure-as-code for provisioning customer environments and standardizing the fleet.

• Oversee fleet health, drift detection, patch management, and version lifecycle management at a customer scale.

• Design and implement multi-tenant isolation patterns, blast-radius containment, RBAC at scale, and cross-account access controls.

• Configure and manage cloud networking components across Azure, AWS, and GCP, such as VPCs/VNets, peering, transit gateways, DNS, firewalls, and load balancers.

• Manage cloud-to-OT/on-prem connectivity for customer environments.

• Establish and uphold IAM, secrets management, and compliance posture across various cloud providers.

• Build and sustain Datadog observability, including monitors, dashboards, log pipelines, and SLOs.

• Engage in a PagerDuty on-call rotation to triage, respond to, and resolve production incidents across customer environments.

• Promote SRE practices by defining SLOs, managing error budgets, maintaining runbooks, and leading post-incident reviews.

• Assist in audit and compliance activities, including evidence collection for FedRAMP, SOC2, and customer-specific requirements.

• Identify and reduce toil through automation and process enhancement.

⛳️ Requirements

• 4+ years of practical cloud operations experience across one or more of Azure, AWS, or GCP.

• Strong expertise in Terraform for infrastructure-as-code, which is the primary IaC tool at Dragos.

• Experience managing cloud environments at scale, including fleet management, patching, upgrades, and drift detection.

• Hands-on experience with multi-tenant cloud architectures and managing customer-facing environments.

• Solid understanding of cloud networking, including VPCs/VNets, peering, transit gateways, DNS, firewalls, and hybrid connectivity.

• Experience with IAM across AWS, Azure Entra ID, and/or GCP, focusing on roles, policies, federation, and SSO.

• Proficient in Datadog for monitoring, alerting, dashboards, and log pipelines.

• Comfortable with on-call responsibilities and participating in a PagerDuty rotation.

• Familiarity with SRE practices, including SLO definition, error budget management, incident response, and blameless post-mortems.

• Strong scripting skills in Python and/or Bash.

• Knowledge of compliance frameworks such as FedRAMP, SOC2, and NIST CSF, along with audit evidence collection.

• A strong ownership mindset and accountability for production stability.

• Excellent communication, documentation, and collaboration skills.

• All new hires must pass a background check as a condition of employment.

• Preferred: Experience with all three major cloud providers: Azure, AWS, and GCP.

• Preferred: Experience managing cloud environments for external customers.

• Preferred: Cybersecurity experience.

• Preferred: Familiarity with cloud-to-OT/ICS network connectivity and segmentation.

• Preferred: Experience with secrets management tools such as HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager.

• Preferred: Experience with AWS Systems Manager, Azure Arc, or GCP Fleet Management.

• Preferred: Proficiency with policy-as-code tools (OPA, Sentinel, AWS SCPs, Azure Policy).

• Preferred: Experience with FinOps practices and optimizing cloud costs.

• Preferred: Familiarity with CSPM tools.

• Preferred: Experience in authoring CI/CD pipelines (GitHub Actions).

• Preferred: A passion for automation and continuously enhancing operational efficiency.

🏝️ Benefits

• Competitive Equity Package.

• Comprehensive Benefits Plan.