Sr. Cloud Infrastructure Engineer

Join a growing Infrastructure team to help design, build, and maintain robust, scalable, and secure cloud environments that power our organization’s operations. As a Senior Cloud Infrastructure Engineer, you will also lead governance and oversight of our Cloud Infrastructure Managed Services (CIMS) provider —ensuring that contracted services are delivered reliably, securely, and cost-effectively in alignment with the organization’s cloud strategy. This role blends deep cloud engineering with operational excellence, incident leadership, and vendor performance management.

• Employees who live within 30 miles of the TMG home office are expected to follow a hybrid or in‑office schedule. The initial training period may require additional in‑office days.

• Design & deliver cloud foundations including account/subscription setup, networking, access controls, guardrails, and secure, scalable architecture patterns across AWS and Azure.
• Implement automation through Infrastructure as Code (Terraform or similar) and CI/CD pipelines to provision, update, and maintain environments.
• Run reliable services by monitoring system health, performance, logs, and security events, responding to incidents, and driving root‑cause analysis.
• Support modernization & migrations, including containerization, serverless adoption, and transition to resilient multi‑AZ/region patterns.

• Serve as the primary technical day‑to‑day interface with the Cloud Infrastructure Managed Services (CIMS) provider supporting our AWS and Azure environments.
• Oversee adherence to SOW/MSA obligations, including scope, SLAs, security tasks, DR drills, ticket concurrency limits, escalation matrix steps, cost reporting, and monthly governance deliverables.
• Review and validate supplier‑delivered RCAs, ensuring corrective actions are completed and prevention steps are implemented.
• Review and approve vendor‑initiated changes to ensure alignment with internal standards.
• Participate in bi‑weekly governance meetings, contributing to KPI reviews, risk tracking, cost insights, and optimization recommendations.

• Lead technical response for cloud‑related Severity 1 & 2 incidents, coordinating with the supplier and internal teams to restore service quickly.
• Ensure incidents meet response and resolution SLAs and elevate via the SOW’s escalation matrix when needed.
• Drive problem management by identifying recurring patterns and implementing remediation with the supplier.

• Apply and enforce cloud security baselines, including MFA, PAM, RBAC, encryption, logging, monitoring, and identity governance.
• Validate periodic vulnerability assessments and cloud security scoring delivered by the supplier; ensure remediation progress.
• Partner with Security and Compliance to ensure cloud environments adhere to data‑protection requirements.
• Review monthly cloud consumption and cost reports delivered by the supplier; validate accuracy of consumption‑based CIMS billing tiers.
• Identify and action cost optimization opportunities including rightsizing, scheduling, storage optimization, and cleanup activities.
• Enforce tagging and cost‑allocation standards for consistent reporting and chargeback readiness.

• Maintain up‑to‑date runbooks, diagrams, and SOPs; ensure supplier documentation meets internal expectations.
• Share best practices and mentor teammates in modern cloud practices, automation, and operational excellence.

• 8+ years in infrastructure/operations/Dev Ops/SRE roles, with 5+ years in cloud infrastructure engineering.
• Hands‑on experience running production workloads in AWS and/or Azure.
• Strong Infrastructure‑as‑Code skills (Terraform or equivalent) and experience with CI/CD automation.
• Solid understanding of cloud networking, IAM/RBAC, security, and cost management.
• Experience working with or overseeing a cloud managed services provider, including ticket management, SLA interpretation, and escalation processes.
• Strong troubleshooting and incident‑response experience,…