{"id":4138314,"url":"https://alion.io/job/knack-remote-cloud-engineer-2","title":"[Remote] Cloud Engineer","company":{"id":449892,"name":"Knack","domain":"knack.com","url":"https://alion.io/company/knack-4","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"ET","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon Redshift","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS Fargate","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CircleCI","optional":false},{"name":"Claude","optional":false},{"name":"Docker","optional":false},{"name":"ETL/ELT","optional":false},{"name":"FedRAMP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitOps","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Node JS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-11-12T02:15:37Z","employer_posted_date":null,"last_verified_at":"2026-11-12T02:15:37Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Note: The job is a remote job and is open to candidates in USA. Knack is hiring a Cloud Engineer to own and evolve its AWS infrastructure across customer environments and regions. The role focuses on infrastructure as code, cloud security and compliance, AI-enabled infrastructure operations, monitoring, database and environment management, automation, and on-call support.\n\nResponsibilities\nManage AWS infrastructure through Terraform using our pull-request-based GitOps workflow, and resolve configuration drift across regions\nUse AI tools to draft, review, and explain Terraform changes, then verify every plan before it merges. You own every change you approve, regardless of who or what wrote it\nMaintain reusable modules and the standards that make AI-generated changes safe and consistent\nHelp design and operate how AI assistants work with our AWS environments, for investigation, analysis, incident triage, and infrastructure changes\nDefine the IAM roles, permission boundaries, logging, and approval gates that govern what AI tools can see and do\nEvaluate AI access for blast radius and audibility\nEnforce encryption at rest and TLS in transit, tighten IAM and S3 permissions, manage WAF rules and security headers, and rotate secrets\nDrive pentest and audit findings to verified fixes in every environment\nSecure the AI tooling itself, including agent credentials, secrets handling, MCP server exposure, and prompt injection risk\nConfigure and maintain SOC 2 and HIPAA controls such as log retention, alarms, VPC flow logs, and backups\nEnsure AI-assisted changes keep the same review, approval, and audit trail as any other change\nGather audit evidence and help maintain security tooling\nCreate dashboards and monitors that catch issues before customers do, and tune noisy alerts\nKeep runbooks current and written so that both people and AI assistants can follow them\nLead OS upgrades, runtime and end-of-life migrations, dependency updates, and certificate renewals\nTune, resize, and secure databases on multiple platforms\nProvision or decommission dedicated customer servers for Sales and Support\nTroubleshoot production issues for Support, Sales, and Engineering\nReplace recurring manual tasks with automation, CI/CD improvements, or self-service tooling, using AI to move faster while verifying what it produces\nParticipate in our weekly 24/7 on-call rotation, responding to production alerts and following up with fixes or runbook updates so the same issue does not repeat\n\nSkills\n3-5 years in cloud infrastructure, DevOps, SRE, or platform engineering, including 2+ years working in AWS production environments. Looking for someone who has experience shipping infrastructure changes through code review. Depth matters more than the number\nExperience operating a multi-tenant SaaS platform at scale, including participating in a 24/7 on-call rotation\nA degree is not required\nDemonstrated hands-on experience counts equally\nDeep AWS knowledge across compute, networking, and security services, such as EC2, ECS/Fargate, Lambda, VPC, IAM, S3, CloudFront, and RDS\nStrong Terraform understanding, including module design, state management, and pull-request-based CI/CD workflows. You can read a plan and explain what will be created, changed, or destroyed, and where the risk is\nWorking knowledge of cloud security fundamentals: least-privilege IAM, encryption in transit and at rest, network security groups and WAFs, secrets management, and vulnerability remediation\nHands-on experience with monitoring and logging tools and building actionable alerts\nExperience administering relational and NoSQL databases in production\nSolid Linux and container (Docker) fundamentals\nAble to read and reason about code and scripts in Python, Go, Bash, or Node.js/TypeScript, including large JavaScript/TypeScript codebases when tracing infrastructure-related bugs. You do not need to write them from scratch\nDaily, practical use of AI tools like Claude, with the judgment to critically review AI-generated scripts, Terraform, and IAM policies, and accountability for everything you ship\nExperience supporting compliance frameworks such as SOC 2, HIPAA, FedRAMP, or ISO 27001, including evidence collection and control implementation\nExperience with AWS GovCloud or other regulated or isolated environments\nA security certification or equivalent depth, such as AWS Certified Security - Specialty, CompTIA Security+, or CCSP, or experience with SIEM, intrusion detection, or threat modeling\nExperience running AI/LLM infrastructure, such as Amazon Bedrock, LLM gateways, vector databases, or MCP servers\nExperience governing AI agent access to cloud environments, including scoped IAM roles, session logging, and approval workflows\nFamiliarity with GitOps tooling for Terraform and CI/CD platforms such as CircleCI, GitHub Actions, or AWS CodeBuild\nExperience with data warehouses and pipelines (for example, Redshift and ETL tooling)\nKubernetes/EKS experience\nExperience at a small or early-stage company where you wore many hats\n\nBenefits\nUS-based full-time employees: remote position based in the United States.\nInternational contractors: full-time, remote position; candidates must have four hours overlap with Eastern timezone.\n\nCompany Overview\nKnack makes it easy to build online databases and business applications with no coding! Stop struggling with excel and access. It was founded in 2010, and is headquartered in Philadelphia, Pennsylvania, USA, with a workforce of 51-200 employees. Its website is https://www.knack.com/.\n\nCompany H1B Sponsorship\nKnack has a track record of offering H1B sponsorships, with 1 in 2026, 1 in 2022. Please note that this does not guarantee sponsorship for this specific role.","description_format":"text","description_chars":5719,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Low-Code & No-Code Platforms"],"lifecycle":[{"event":"open","at":"2026-11-12T04:19:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":33,"reasons":["seen:0","win:early"],"computed_at":"2026-11-12T06:37:51Z"},"pay":null,"html_url":"https://alion.io/job/knack-remote-cloud-engineer-2","json_url":"https://alion.io/job/knack-remote-cloud-engineer-2.json","meta":{"generated_at":"2026-11-12T06:37:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13252,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":449892},"rest":"https://alion.io/mcp/rest/get_company?id=449892"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fknack-remote-cloud-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fknack-remote-cloud-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fknack-remote-cloud-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/knack-remote-cloud-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fknack-remote-cloud-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4138314}},{"tool":"search_jobs","arguments":{"company":"knack.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4138314},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}