Senior Cloud Infrastructure Engineer

We are seeking a Senior Cloud Infrastructure Engineer. In this role you design, build and operate secure, compliant cloud environments that support engineering, manufacturing and business operations at Astronautics Corporation of America and Kearfott Corporation. You will bring deep expertise in at least one of GCP, AWS or Azure and help shape how our teams use all three platforms. Working closely with Infrastructure, Cybersecurity and business partners, you will turn business needs into reliable cloud solutions while protecting Controlled Unclassified Information (CUI) and export-controlled technical data.

You will also own the operational documentation that helps support, infrastructure and cybersecurity teams run these environments every day.

We are seeking a Senior Cloud Infrastructure Engineer. In this role you design, build and operate secure, compliant cloud environments that support engineering, manufacturing and business operations at Astronautics Corporation of America and Kearfott Corporation. You will bring deep expertise in at least one of GCP, AWS or Azure and help shape how our teams use all three platforms. Working closely with Infrastructure, Cybersecurity and business partners, you will turn business needs into reliable cloud solutions while protecting Controlled Unclassified Information (CUI) and export-controlled technical data.

You will also own the operational documentation that helps support, infrastructure and cybersecurity teams run these environments every day. This hybrid on-site position is located at our Headquarters in Oak Creek, WI. You will report directly to the Senior Manager, Cybersecurity & I.T. Infrastructure.

• Design, build and maintain cloud infrastructure across GCP, AWS and Azure, including government and sovereign cloud environments such as GCP Assured Workloads, AWS Gov Cloud, Azure Government and GCC-High.
• Build reusable, version-controlled landing zones and infrastructure-as-code modules using Terraform or Open Tofu and cloud-native tools such as Bicep/ARM and Cloud Formation.
• Create CI/CD pipelines for infrastructure changes with automated testing, peer review and policy-as-code controls such as OPA, Sentinel or Checkov.
• Harden operating systems and cloud platforms using Ansible or similar tools, applying and maintaining DISA STIG and CIS baselines.
• Implement and validate CMMC Level 2 and NIST SP 800-171 controls. Design for ITAR and EAR requirements, including U.S. data residency, U.S. Person access, encryption and key management.
• Produce and maintain compliance evidence, including System Security Plan inputs, configuration baselines, architecture diagrams and audit artifacts for C3
  
  PAO assessments.
• Monitor for and correct configuration drift, and manage infrastructure changes through formal change control.
• Work with cybersecurity, identity and endpoint teams on logging, monitoring, access management and incident response across on-premises and cloud environments, including Active Directory and Entra .
• Gather requirements from business leaders, application owners and project teams. Translate functional and non-functional needs—including availability, performance, scalability, recovery, compliance and data sensitivity—into clear technical designs.
• Evaluate cloud platforms, services and deployment patterns, weighing cost, security, compliance, performance, resiliency and supportability. Estimate the cost, effort and risk of proposed solutions and apply Fin Ops practices to manage costs over time.
• Lead solutions from concept through design, implementation, operational handoff and support. Document designs and decisions, and present recommendations to technical and non-technical stakeholders.
• Write and…