Sr. Cloud Infrastructure Engineer

Job Description

Join a growing Infrastructure team to help design, build, and maintain robust, scalable, and secure cloud environments that power our organization’s operations. As a Senior Cloud Infrastructure Engineer, you will also lead governance and oversight of our Cloud Infrastructure Managed Services (CIMS) provider — ensuring that contracted services are delivered reliably, securely, and cost‑effectively in alignment with the organization’s cloud strategy.

This role blends deep cloud engineering with operational excellence, incident leadership, and vendor performance management.

Information Technology

• Employees who live within 30 miles of the TMG home office are expected to follow a hybrid or in‑office schedule. The initial training period may require additional in‑office days.

• Design & deliver cloud foundations including account/subscription setup, networking, access controls, guardrails, and secure, scalable architecture patterns across AWS and Azure.
• Implement automation through Infrastructure as Code (Terraform or similar) and CI/CD pipelines to provision, update, and maintain environments.
• Run reliable services by monitoring system health, performance, logs, and security events, responding to incidents, and driving root‑cause analysis.
• Support modernization & migrations, including containerization, serverless adoption, and transition to resilient multi‑AZ/region patterns.

• Serve as the primary technical day‑to‑day interface with the Cloud Infrastructure Managed Services (CIMS) provider supporting our AWS and Azure environments.
• Oversee adherence to SOW/MSA obligations, including scope, SLAs, security tasks, DR drills, ticket concurrency limits, escalation matrix steps, cost reporting, and monthly governance deliverables.
• Review and validate supplier‑delivered RCAs, ensuring corrective actions are completed and prevention steps are implemented.
• Review and approve vendor‑initiated changes to ensure alignment with internal standards.
• Participate in bi‑weekly governance meetings, contributing to KPI reviews, risk tracking, cost insights, and optimization recommendations.

• Lead technical response for cloud‑related Severity 1 & 2 incidents, coordinating with the supplier and internal teams to restore service quickly.
• Ensure incidents meet response and resolution SLAs and escalates via the SOW’s escalation matrix when needed.
• Drive problem management by identifying recurring patterns and implementing remediation with the supplier.

• Apply and enforce cloud security baselines, including MFA, PAM, RBAC, encryption, logging, monitoring, and identity governance.
• Validate periodic vulnerability assessments and cloud security scoring delivered by the supplier; ensure remediation progress.
• Partner with Security and Compliance to ensure cloud environments adhere to data‑protection requirements.

• Review monthly cloud consumption and cost reports delivered by the supplier; validate accuracy of consumption‑based CIMS billing tiers.
• Identify and action cost optimization opportunities including rightsizing, scheduling, storage optimization, and cleanup activities.
• Enforce tagging and cost‑allocation standards for consistent reporting and chargeback readiness.

• Maintain up‑to‑date runbooks, diagrams, and SOPs; ensure supplier documentation meets internal expectations.
• Share best practices and mentor teammates in modern cloud practices, automation, and operational excellence.

• 8+ years in infrastructure/operations/Dev Ops/SRE roles, with 5+ years in cloud infrastructure engineering.
• Hands‑on experience running production workloads in AWS and/or Azure.
• Strong Infrastructure‑as‑Code skills (Terraform or equivalent) and experience with CI/CD automation.
• Solid understanding of cloud networking, IAM/RBAC, security, and cost management.
• Experience working with or overseeing a cloud managed services provider, including ticket management, SLA interpretation,…