[Remote] Cloud Engineer

Note: The job is a remote job and is open to candidates in USA. Knack is hiring a Cloud Engineer to own and evolve its AWS infrastructure across customer environments and regions. The role focuses on infrastructure as code, cloud security and compliance, AI-enabled infrastructure operations, monitoring, database and environment management, automation, and on-call support.

Responsibilities

• Manage AWS infrastructure through Terraform using our pull-request-based GitOps workflow, and resolve configuration drift across regions
• Use AI tools to draft, review, and explain Terraform changes, then verify every plan before it merges. You own every change you approve, regardless of who or what wrote it
• Maintain reusable modules and the standards that make AI-generated changes safe and consistent
• Help design and operate how AI assistants work with our AWS environments, for investigation, analysis, incident triage, and infrastructure changes
• Define the IAM roles, permission boundaries, logging, and approval gates that govern what AI tools can see and do
• Evaluate AI access for blast radius and audibility
• Enforce encryption at rest and TLS in transit, tighten IAM and S3 permissions, manage WAF rules and security headers, and rotate secrets
• Drive pentest and audit findings to verified fixes in every environment
• Secure the AI tooling itself, including agent credentials, secrets handling, MCP server exposure, and prompt injection risk
• Configure and maintain SOC 2 and HIPAA controls such as log retention, alarms, VPC flow logs, and backups
• Ensure AI-assisted changes keep the same review, approval, and audit trail as any other change
• Gather audit evidence and help maintain security tooling
• Create dashboards and monitors that catch issues before customers do, and tune noisy alerts
• Keep runbooks current and written so that both people and AI assistants can follow them
• Lead OS upgrades, runtime and end-of-life migrations, dependency updates, and certificate renewals
• Tune, resize, and secure databases on multiple platforms
• Provision or decommission dedicated customer servers for Sales and Support
• Troubleshoot production issues for Support, Sales, and Engineering
• Replace recurring manual tasks with automation, CI/CD improvements, or self-service tooling, using AI to move faster while verifying what it produces
• Participate in our weekly 24/7 on-call rotation, responding to production alerts and following up with fixes or runbook updates so the same issue does not repeat

Skills

• 3-5 years in cloud infrastructure, DevOps, SRE, or platform engineering, including 2+ years working in AWS production environments. Looking for someone who has experience shipping infrastructure changes through code review. Depth matters more than the number
• Experience operating a multi-tenant SaaS platform at scale, including participating in a 24/7 on-call rotation
• A degree is not required
• Demonstrated hands-on experience counts equally
• Deep AWS knowledge across compute, networking, and security services, such as EC2, ECS/Fargate, Lambda, VPC, IAM, S3, CloudFront, and RDS
• Strong Terraform understanding, including module design, state management, and pull-request-based CI/CD workflows. You can read a plan and explain what will be created, changed, or destroyed, and where the risk is
• Working knowledge of cloud security fundamentals: least-privilege IAM, encryption in transit and at rest, network security groups and WAFs, secrets management, and vulnerability remediation
• Hands-on experience with monitoring and logging tools and building actionable alerts
• Experience administering relational and NoSQL databases in production
• Solid Linux and container (Docker) fundamentals
• Able to read and reason about code and scripts in Python, Go, Bash, or Node.js/TypeScript, including large JavaScript/TypeScript codebases when tracing infrastructure-related bugs. You do not need to write them from scratch
• Daily, practical use of AI tools like Claude, with the judgment to critically review AI-generated scripts, Terraform, and IAM policies, and accountability for everything you ship
• Experience supporting compliance frameworks such as SOC 2, HIPAA, FedRAMP, or ISO 27001, including evidence collection and control implementation
• Experience with AWS GovCloud or other regulated or isolated environments
• A security certification or equivalent depth, such as AWS Certified Security - Specialty, CompTIA Security+, or CCSP, or experience with SIEM, intrusion detection, or threat modeling
• Experience running AI/LLM infrastructure, such as Amazon Bedrock, LLM gateways, vector databases, or MCP servers
• Experience governing AI agent access to cloud environments, including scoped IAM roles, session logging, and approval workflows
• Familiarity with GitOps tooling for Terraform and CI/CD platforms such as CircleCI, GitHub Actions, or AWS CodeBuild
• Experience with data warehouses and pipelines (for example, Redshift and ETL tooling)
• Kubernetes/EKS experience
• Experience at a small or early-stage company where you wore many hats

Benefits

• US-based full-time employees: remote position based in the United States.
• International contractors: full-time, remote position; candidates must have four hours overlap with Eastern timezone.

Company Overview

Company H1B Sponsorship