{"id":187074,"url":"https://alion.io/job/platform-science-cloud-infrastructure-engineer","title":"Cloud Infrastructure Engineer","company":{"id":3641,"name":"Platform Science","domain":"platformscience.com","url":"https://alion.io/company/platform-science","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":39000,"max_usd":108000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3074},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"Cursor","optional":false},{"name":"DNS","optional":false},{"name":"FinOps","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Okta","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Terragrunt","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true},{"name":"cert-manager","optional":true},{"name":"Cloudflare WAF","optional":true},{"name":"Crowdstrike","optional":true},{"name":"PKI","optional":true},{"name":"Wiz","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-09-01T19:06:03Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-17T19:03:44Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":46},"description":"LOCATION: Londrina, Parana, Brazil\nWho We Are\nAt Platform Science, we’re working to connect everything that moves.\nFounded in 2015, Platform Science is an open IoT platform partnering with innovative fleets, application developers, vehicle manufacturers, and equipment providers across the transportation industry. Our technology helps deliver modern solutions to supply chain professionals around the world.\nOur employees bring diverse backgrounds, experiences, and perspectives. We believe great ideas can come from anywhere, and we foster a culture built around innovation, collaboration, empathy, resilience, and transparency.\nAbout the Role\nPlatform Science is looking for a Cloud Infrastructure Engineer to join our CloudOps team.\nCloudOps owns the foundational cloud infrastructure that enables our engineering teams to build, deploy, and operate products at scale. The team manages identity, networking, governance, security guardrails, backup, disaster recovery, and shared cloud services across a multi-account AWS environment spanning hundreds of accounts and multiple business units. We are also extending this operating model across Azure and GCP.\nThis is a hands-on senior individual contributor role for an engineer who enjoys building foundational infrastructure and solving complex cloud problems. You will own infrastructure and platform capabilities end to end, work primarily through Infrastructure as Code, and create guardrails and self-service capabilities that allow engineering teams to move quickly without sacrificing security or reliability.\nThe scope is intentionally broad. You may work on cloud identity and permissions, private networking, multi-cloud governance, backup and disaster recovery, security remediation, or developer self-service capabilities.\nAI-assisted engineering is also part of how the team operates. We use AI coding agents to accelerate implementation and automation while maintaining rigorous engineering review, security, and production standards.\nWhat You'll Do\nImplement and maintain components of our multi-account AWS Landing Zone (AWS Organizations, Control Tower, AFT, tagging standards, permission boundaries) within established patterns.\nSupport governance, security controls, observability, and backup capabilities across AWS, and increasingly Azure and GCP, following established standards.\nAdminister cloud identity and access management day-to-day - Okta federation, AWS IAM Identity Center, permission sets, group membership, credential hygiene - applying least-privilege principles within existing frameworks.\nConfigure and maintain cloud networking components: IP address management, VPC configuration, routing, transit connectivity, DNS - following architecture set by senior engineers.\nContribute to migrating workloads from public-internet exposure to private/zero-trust networking models under established playbooks.\nBuild and maintain self-service infrastructure workflows (account provisioning, environment provisioning, access requests) using existing frameworks and patterns.\nExecute backup, restore, and disaster recovery procedures across cloud regions and accounts; help maintain and test DR runbooks.\nBuild and maintain Terraform/Terragrunt modules consumed by other engineering teams, following established module patterns.\nMaintain CI/CD automation for cloud infrastructure.\nInvestigate and remediate cloud security findings identified by Security teams.\nSupport FinOps initiatives by implementing identified cost optimization opportunities.\nMaintain documentation, runbooks, and operating procedures for owned systems.\nUse AI coding agents as part of the engineering workflow, validating output and maintaining ownership of code review, testing, and production outcomes for your work.\nRequired Experience\n5+ years of professional experience in Cloud Infrastructure, DevOps, Site Reliability Engineering, Platform Engineering, Systems Engineering, or a related infrastructure discipline (or equivalent combination of education and experience).\n3+ years of hands-on experience with AWS or another major public cloud, with significant AWS experience strongly preferred.\n1+ years of Infrastructure as Code experience, preferably using Terraform and/or Terragrunt.\nWorking experience within an AWS multi-account environment (AWS Organizations, Control Tower, or comparable landing-zone architecture).\nExposure to at least one additional major cloud platform (Azure or GCP) beyond a single workload.\nExperience building or maintaining Infrastructure as Code modules used by others.\nHands-on experience with cloud identity and access management: SSO, SAML federation, SCIM provisioning, IAM policies/roles, permission boundaries.\nSolid cloud networking fundamentals: IP address planning, VPC/VNet configuration, routing, DNS, network security.\nExperience maintaining CI/CD pipelines (GitHub Actions, Jenkins, or similar).\nScripting/programming experience with Python, Go, Bash, or similar.\nStrong Linux fundamentals.\nWorking knowledge of Kubernetes and cloud-native infrastructure.\nExperience using AI coding agents or AI-assisted development tools (Claude Code, Cursor, Codex, or similar), including validating generated code and identifying operational or security risk.\nAbility to work independently on well-defined infrastructure tasks and exercise judgment within established guidelines.\nStrong written and verbal communication skills; able to collaborate across Engineering, Security, and FinOps teams.\nAdvanced English proficiency.\nBachelor's degree in Computer Science, Software Engineering, Information Technology, or a related technical field + 5 years of experience; or equivalent combination of education and experience.\nMust reside in Brazil.\nPreferred Qualifications\nExperience with one or more of the following is a plus:\nAWS Control Tower and Account Factory for Terraform (AFT)\nAWS IPAM, Transit Gateway, or Cloud WAN\nExposure to multi-cloud environments (AWS, Azure, and/or GCP)\nMongoDB Atlas, Elastic Cloud, or similar managed data platforms\nWiz, GuardDuty, CrowdStrike, or other cloud security posture/security platforms\nZero-trust networking technologies such as Zscaler ZPA\nCloudflare WAF and DNS\nCertificate and PKI lifecycle basics (ACM, cert-manager, Let's Encrypt)\nExposure to agentic automation pipelines or AI agent workflows\nCloud cost optimization / FinOps fundamentals\nAWS, Azure, GCP, Terraform, or Kubernetes certifications","description_format":"text","description_chars":6433,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Fleet Management","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-09-01T20:20:56Z"}],"visa":[],"liveness":{"score":71,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.784,"p_room":0.9,"age_days":45,"expected_fill_days":72,"reasons":["conf:3","win:mid"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/platform-science-cloud-infrastructure-engineer","json_url":"https://alion.io/job/platform-science-cloud-infrastructure-engineer.json","meta":{"generated_at":"2026-10-17T20:41:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4783,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3641},"rest":"https://alion.io/mcp/rest/get_company?id=3641"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fplatform-science-cloud-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fplatform-science-cloud-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fplatform-science-cloud-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/platform-science-cloud-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fplatform-science-cloud-infrastructure-engineer"}]}