{"id":4084367,"url":"https://alion.io/job/cpi-card-group-cloud-engineer","title":"Cloud Engineer","company":{"id":2151474,"name":"CPI Card Group","domain":"cpicardgroup.com","url":"https://alion.io/company/cpicardgroup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Jenkins","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-11-11T18:30:41Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T18:30:41Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nCPI Card Group is seeking a Cloud Engineer with a DevSecOps focus and hands-on experience in Amazon Web Services (AWS), AWS Security Services, infrastructure automation, to join the Infrastructure Cloud Engineering team. This role implements, automates, and operates secure, resilient infrastructure capabilities across a hybrid environment that includes on-premises environments, AWS Infrastructure as a Service, and relevant SaaS integrations.\nThe position strengthens the Cloud Engineering organization with a focus on AWS Cloud Security, and associated security services, infrastructure delivery pipelines, threat-detection integration, vulnerability and configuration remediation, data-protection controls, incident response, and compliance-control implementation. The engineer contributes to reusable infrastructure patterns, standards, guardrails, and automated controls that integrate security throughout the platform engineering and CloudOps lifecycle.\nWorking closely with Cybersecurity, Software Engineering, and other technology teams, this role translates security and compliance requirements into implementable infrastructure capabilities. This role is accountable for incorporating AWS Cloud Security controls within the scope of Infrastructure Cloud Engineering and associated infrastructure cloud platforms. Enterprise cybersecurity architecture, security policy, and cyber-risk governance remain with Cybersecurity.\nResponsibilities\nAWS infrastructure security: Engineer and operate security capabilities supporting multi-account AWS environments, including logging, configuration compliance, threat detection, vulnerability visibility, network protection, encryption, and data protection. This work leverages AWS-native services such as AWS CloudTrail, AWS Config, Amazon GuardDuty, Amazon Inspector, AWS Security Hub, AWS Shield Advanced, and AWS KMS. \nInfrastructure as Code and automated controls: Develop and maintain Terraform, AWS CloudFormation, scripts, modules, policies, and automated workflows that provision secure infrastructures and platforms while continuously validating required security controls. \nSecure delivery pipelines: Implement and improve infrastructure delivery pipelines, including security testing, policy checks, approval controls, separation-of-duties requirements, artifact integrity, and controlled promotion across environments. \nSecure infrastructure patterns and standards: Implement and maintain secure, scalable, and resilient infrastructure patterns across AWS and hybrid integrations using approved architectures, standards, and guardrails. \nThreat, vulnerability, and risk reduction: Automate the identification, prioritization, tracking, and remediation of infrastructure vulnerabilities, insecure configurations, and control gaps. Provide technical evidence and remediation support for risk-management activities. \nHybrid infrastructure protection: Integrate security controls across on-premises environments, AWS infrastructure, and relevant SaaS services. Support network segmentation, security groups, firewall integration, DDoS-resilient designs, secure connectivity, and infrastructure protection patterns. \nSecurity monitoring and response: Improve infrastructure telemetry, alerting, and operational response through AWS and enterprise monitoring platforms. Participate in security and infrastructure incidents, root-cause analysis, containment, recovery, and corrective-action automation. \nCompliance implementation and evidence: Partner with Cybersecurity to translate PCI DSS and other applicable control requirements into technical controls, validation methods, documentation, and repeatable audit evidence. CloudOps and platform operations: Monitor infrastructure health, security posture, reliability, and control effectiveness. Participate in lifecycle management, change management, problem management, operational readiness, and the team's 7x24 on-call rotation. \nCollaboration and documentation: Contribute to design reviews, technical documentation, and knowledge sharing. Communicate options, risks, tradeoffs, and recommendations to technical, non-technical, and leadership audiences. \nContinuous improvement: Evaluate relevant AWS services and industry practices, pilot improvements within approved guardrails, and reduce manual work through safe, measurable automation.\nQualifications\nBuilds for operations: Designs infrastructure with day-two operations in mind. Monitoring, alerting, patching, backup, and recovery are part of \"done,\" not added later. \nBuilds security in: Treats security controls as engineering requirements that are coded, tested, and validated in the pipeline, not as reviews applied after deployment. \nAutomates first: Prefers code over console changes. Spots repeated manual work and turns it into automation that is versioned, reviewed, and repeatable. \nTroubleshoots across layers: Diagnoses issues that span AWS, networking, identity, on-premises systems, and SaaS integrations. Uses logs, metrics, and security findings to find the root cause, not just the symptom. \nWorks with operational discipline: Follows change management and approved standards. Leaves systems and runbooks in a state another engineer can support during an on-call event. \nRespects ownership boundaries: Understands what Cloud Engineering owns and what belongs to Cybersecurity and Technology Governance, Risk and Compliance, and knows how to engage those teams effectively. \nExercises risk-aware judgment: Recognizes when a design, request, or shortcut creates unacceptable risk. Raises it with evidence and a recommended option, explained in plain terms for engineers, auditors, and leaders. \nKeeps learning: Keeps AWS, security, and automation skills current and applies what they learn to improve team patterns and practices.\nRequirements:\nBachelor’s or Master’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related discipline, or comparable professional experience. \nThree or more years of experience in cloud engineering, infrastructure engineering, DevOps, DevSecOps, cloud security engineering, or comparable technical roles. \nHands-on experience deploying, securing, and operating AWS infrastructure in production or regulated hybrid environments. \nExperience implementing or improving security controls within production cloud or hybrid infrastructure. \nProficiency with Infrastructure as Code, preferably Terraform, with experience developing reusable modules, automated testing, policy validation, and controlled deployment practices. \nHands-on experience with CI/CD platforms and source control, such as GitLab CI/CD, Jenkins, GitHub Actions, or AWS-native delivery services. \nStrong scripting or software automation skills using Python, Bash, PowerShell, or a comparable language. \nExperience with multi-account AWS environments, identity and access controls, logging and monitoring, configuration compliance, vulnerability management, encryption, data protection, and network security. \nExperience participating in infrastructure or security incident response, root-cause analysis, and corrective-action implementation. \nWorking knowledge of regulated-industry security and compliance practices. Experience with PCI DSS is preferred.\nPreferred Certification and Qualification Paths:\nCandidates may demonstrate readiness through one or more of the following paths. AWS certifications are preferred; equivalent hands-on experience will be considered: Preferred path: An equivalent combination of AWS architecture, operations, security, automation, and production engineering experience aligned to the following certifications: AWS Certified Security - Specialty AWS Certified Solutions Architect - Associate or AWS Certified CloudOps Engineer - Associate\nAdditional desired qualifications: AWS certifications or equivalent experience aligned to: AWS Certified DevOps Engineer - Professional AWS Certified Solutions Architect - Professional AWS Certified AI Practitioner","description_format":"text","description_chars":8016,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Payment Processing & Gateways","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-11T18:30:41Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":7,"reasons":["conf:2","win:early"],"computed_at":"2026-11-11T20:39:46Z"},"pay":null,"html_url":"https://alion.io/job/cpi-card-group-cloud-engineer","json_url":"https://alion.io/job/cpi-card-group-cloud-engineer.json","meta":{"generated_at":"2026-11-11T20:39:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":40314,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2151474},"rest":"https://alion.io/mcp/rest/get_company?id=2151474"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcpi-card-group-cloud-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcpi-card-group-cloud-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcpi-card-group-cloud-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cpi-card-group-cloud-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcpi-card-group-cloud-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4084367}},{"tool":"search_jobs","arguments":{"company":"cpicardgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4084367},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}