Cloud Engineer

Position Title: Cloud Engineer

Location: Hybrid / Indianapolis, IN

Starting Pay for position: $130k

JOIN OUR TEAM!  

About Herff Jones:

Indianapolis-based Herff Jones is the leading provider of graduation and educational products and services designed to inspire achievement and create memorable experiences for students. Herff Jones’ products include class rings and jewelry, caps and gowns, diplomas and announcements as well as motivation and recognition programs. Focused on building long-term relationships through a nationwide network of over 1,400 employees and sales partners, the professionals at Herff Jones have been helping elevate the student experience throughout the lifelong journey of education for more than 100 years. For more information about Herff Jones, please visit www.herffjones.com. 

Position Summary: 

The Herff Jones IT Team is seeking a Cloud Engineer to join our Infrastructure Services team. This role is the technical owner of our AWS and Azure environments and the bridge between our on-premises datacenter and the cloud: the person who builds the foundation, keeps it secure, well-governed, and resilient, and drives it forward. The Cloud Engineer provides and governs the cloud environment that implementation partners build in during a major infrastructure modernization initiative, supports the systems hosted there, and builds and maintains the cloud resources for work outside that initiative. In the near term, the role also shares support of our Windows and Linux server infrastructure. The Cloud Engineer is one of six engineers on our Infrastructure Services team, each with a complementary specialty, who share support, cross-coverage, and an on-call rotation, and partners closely with the Security and Application teams.

Key Responsibilities:

Cloud Architecture & Engineering

Design, build, and maintain secure, scalable infrastructure in AWS and Azure, including compute, storage, networking, serverless, and container services.

Establish and maintain cloud landing zones, including account and subscription structure, guardrails, tagging, and governance aligned with the AWS Well-Architected Framework and Microsoft Cloud Adoption Framework.

Build and maintain cloud infrastructure as code (e.g., Terraform, AWS CloudFormation, Bicep) with source control and CI/CD pipelines, and automate routine tasks using PowerShell, Python, or Bash.

Develop and maintain cloud standards, reference architectures, and documentation, including diagrams and configuration baselines.

Contribute to the multi-year infrastructure roadmap for the cloud and hybrid domain.

Hybrid Infrastructure & Partner Support

Design and maintain secure hybrid connectivity and DNS between on-premises sites and AWS and Azure (e.g., site-to-site VPN, AWS Direct Connect, Azure ExpressRoute), in partnership with network engineering.

Provide and govern the cloud environment that implementation partners build in, ensuring the underlying infrastructure aligns with our security and governance standards and best practices.

Troubleshoot and support partner-built systems hosted in our environment, and build and maintain cloud resources for initiatives outside the partner engagement.

Share support of on-premises Windows and Linux server infrastructure with other Infrastructure engineers in the near term, including patching, lifecycle management, and troubleshooting.

Support workload migrations and the operational handoff of partner-delivered infrastructure, including runbooks, monitoring, backup, and disaster recovery.

Cloud Security & Governance

Implement cloud security controls, including IAM, least-privilege access, encryption, logging, and policy enforcement, in partnership with the Security team.

Integrate cloud platforms with enterprise identity (Active Directory, Microsoft Entra ID, AWS IAM Identity Center) in partnership with other Infrastructure engineers.

Monitor and optimize cloud spend through rightsizing, reserved capacity, and cost reporting, and support budget planning and forecasting.

Support PCI DSS requirements, audit readiness, and vulnerability remediation for cloud and server infrastructure.

Cloud Operations & Incident Response

Implement and tune monitoring, alerting, and logging for cloud and hybrid workloads (e.g., Amazon CloudWatch, Azure Monitor).

Serve as an escalation point for cloud and hybrid infrastructure incidents; lead troubleshooting and root cause analysis for Priority 1–2 issues.

Plan and execute changes and maintenance windows, with rollback plans, following the Change Management process.

Participate in a shared on-call rotation with the Infrastructure team for after-hours support.

Mentor engineers and support staff, and contribute to cross-training and knowledge sharing.

Additional Responsibilities

Other duties as assigned.

Qualifications & Skills: 

Required

Hands-on production experience with core AWS and Azure services across compute, storage, networking, identity, and monitoring; strong AWS experience is highly preferred.

Working knowledge of cloud landing zones and multi-account or multi-subscription governance, and of the AWS Well-Architected Framework or Microsoft Cloud Adoption Framework.

Experience with hybrid connectivity and cloud networking (VPC/VNet design, VPN, AWS Direct Connect or Azure ExpressRoute, DNS, and routing) and with serverless services (e.g., AWS Lambda, Azure Functions).

Solid Windows Server and Linux administration experience in enterprise environments.

Scripting skills (PowerShell, Python, or Bash) for infrastructure automation.

Disciplined approach to documentation and change management.

Preferred

Industry cloud certifications such as AWS Certified Solutions Architect – Associate or Professional, AWS Certified SysOps Administrator – Associate, Microsoft Certified: Azure Administrator Associate (AZ-104), Microsoft Certified: Azure Solutions Architect Expert (AZ-305), or equivalent.

Experience with infrastructure-as-code and CI/CD tools (e.g., Terraform, AWS CloudFormation or CDK, Bicep, GitHub Actions, Azure DevOps) and with containers and Kubernetes (e.g., Docker, Amazon EKS, AKS).

Multi-cloud experience across AWS and Azure, including migrating workloads from on-premises datacenters.

Experience with Microsoft 365, Microsoft Entra ID, and hybrid identity.

Experience supporting consultants, managed service providers, or implementation partners working in a shared cloud environment, including during large-scale infrastructure transformation programs.

Familiarity with PCI DSS requirements and with NIST or CIS frameworks.

Soft Skills

Strong problem-solving and analytical mindset.

Ability to communicate complex technical concepts to non-technical stakeholders.

Composure and sound judgment under pressure during outages and periods of major change.

Collaborative and proactive attitude with a focus on continuous improvement.

Strong organizational skills and attention to detail.

Education & Experience:  

Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).

5+ years of systems engineering experience in multi-site enterprise environments, including at least 3 years designing and operating production workloads in AWS or Azure.

Physical Requirements & Work Environment:

Hybrid position based in Indianapolis, IN, with a mix of on-site and remote work.

Prolonged periods of sitting and computer use; occasional work in datacenter environments, including lifting equipment up to 50 lbs.

Participation in a shared after-hours on-call rotation and scheduled maintenance windows.

Occasional travel to Herff Jones facilities may be required.

Herff Jones, Inc. and its affiliates are equal opportunity employers and maintain affirmative action plans to recruit, retain, develop, and promote qualified individuals without unlawful consideration of race, gender, gender identity, color, religion, sexual orientation, national origin, age, disability, citizenship status, veteran status, or any other characteristic protected by federal, state or local law. Herff Jones strives to maintain a work environment free from unlawful discrimination and harassment, where associates are treated with respect and dignity. 

Any employment agency, person or entity that submits a résumé into this career site or to a hiring manager does so with the understanding that the applicant's résumé will become the property of Herff Jones. Herff Jones will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.