Senior Cloud Operations Specialist

Position Summary

The Senior Cloud Operations Specialist is a senior technical owner for the stability security governance and resilience of Assents enterprise AWS environment and SaaS production systems. The role combines hands-on cloud operations with solution architecture technical leadership and sound risk-based decision making across a large multi-account AWS estate.

Working within the SaaS Product Infrastructure group this individual partners with Engineering Product Corporate Security and IT to design and operate secure highly available cloud services. The successful candidate works independently at a high level turns business and technical requirements into practical solutions and constructively challenges decisions that introduce unnecessary risk operational burden or architectural debt.

This role follows a strict code-first and least-privilege operating model. Infrastructure changes are codified peer-reviewed and delivered through approved pipelines. Privileged access is exceptional time-bound auditable and used only when required.

Responsibilities

Architecture Technical Leadership and Decision Making

• Lead the design and delivery of secure scalable resilient and supportable AWS solutions from initial requirements through production operation.

• Translate business security compliance and operational requirements into architecture decisions implementation plans and reusable platform patterns.

• Evaluate technical options and make clear risk-based recommendations that balance security reliability maintainability delivery speed and cost.

• Question assumptions and respectfully challenge designs or delivery approaches that conflict with enterprise standards least-privilege principles reliability objectives or long-term platform health.

• Participate in architecture and design reviews document key decisions and tradeoffs and ensure operational readiness before production adoption.

• Act as a senior technical escalation point lead complex infrastructure initiatives and coach team members through design and operational decisions.

AWS Platform Governance Identity and Privileged Access

• Own and continuously improve Assents AWS multi-account environment using AWS Organizations AWS Control Tower organizational units account lifecycle controls guardrails and Service Control Policies.

• Architect and operate AWS IAM Identity Center IAM roles and policies permission sets trust relationships permission boundaries federation and cross-account access patterns.

• Apply least privilege by default. Ensure elevated access is approved time-bound where supported protected by strong authentication logged regularly reviewed and separated from day-to-day identities.

• Maintain controlled break-glass access and prevent shared credentials unmanaged access paths unnecessary standing privilege and unreviewed administrative changes.

• Lead account provisioning compliance assessments access reviews drift detection and remediation across the AWS organization.

• Partner with Corporate Security on identity governance audit readiness cloud control design and the implementation of enterprise security requirements.

Enterprise AWS Networking

• Design operate and troubleshoot enterprise AWS network architectures across accounts and regions including VPCs subnets route tables security groups network ACLs and shared network services.

• Own connectivity and traffic-flow patterns using services such as Transit Gateway VPC peering PrivateLink VPN Direct Connect Route 53 Elastic Load Balancing API Gateway and CloudFront.

• Design secure ingress egress segmentation DNS and service-to-service connectivity patterns using AWS Network Firewall AWS WAF VPC endpoints flow logs and centralized inspection where appropriate.

• Diagnose complex routing name resolution load-balancing firewall latency and cross-account connectivity issues and drive permanent corrective action.

• Maintain current network diagrams traffic-flow documentation connectivity standards and recovery procedures.

Infrastructure as Code Automation and Delivery

• Provision and govern AWS platform resources through Terraform using reusable modules secure remote state controlled workspaces and maintainable multi-account patterns.

• Use GitHub Actions as the primary delivery mechanism for infrastructure and governance changes with peer review validation security checks approvals and traceable deployment records.

• Uphold a no unmanaged changes standard. Use AWS console access only for approved operational needs and codify or reconcile any necessary emergency change promptly.

• Build automation with Python PowerShell Bash Lambda Ansible Semaphore or similar tools to reduce manual effort enforce consistency and improve recovery time.

• Review infrastructure code and automation for security reliability maintainability and alignment with enterprise standards.

Cloud Operations Reliability and Incident Response

• Operate and improve core AWS services across compute containers databases storage messaging DNS content delivery security and monitoring.

• Install configure secure patch and troubleshoot Linux and Windows workloads in cloud environments.

• Establish effective monitoring logging alerting dashboards and automated remediation using CloudWatch OpenSearch or Elasticsearch New Relic PagerDuty or comparable platforms.

• Lead or support high-severity incident response communicate clearly under pressure restore service safely and coordinate across technical and business teams.

• Conduct root-cause analysis and ensure corrective actions address underlying technical and process failures rather than only immediate symptoms.

• Participate in the on-call rotation and planned off-hours work required to support production infrastructure.

Security Compliance Resilience and Operational Ownership

• Maintain enterprise standards for encryption key management audit logging configuration compliance vulnerability remediation and evidence collection using services such as KMS CloudTrail and AWS Config.

• Support internal and external audits and provide clear evidence of cloud controls access governance and operational processes.

• Design implement and test backup business continuity disaster recovery and multi-region resilience capabilities.

• Create and maintain accurate documentation for cloud architecture governance controls operational procedures automation workflows and support handoffs.

• Take end-to-end ownership of assigned platforms and initiatives surface risks early and follow decisions through implementation and operational acceptance.

Qualifications :

Minimum Requirements

• 7 or more years of relevant experience in cloud operations platform engineering infrastructure engineering or systems administration including substantial hands-on responsibility for enterprise AWS environments.

• Proven long-term ownership of a multi-account AWS organization using AWS Organizations AWS Control Tower and AWS IAM Identity Center.

• Deep experience with enterprise AWS governance including organizational design account provisioning Service Control Policies guardrails configuration compliance and drift remediation.

• Advanced knowledge of AWS identity and access management including least privilege privileged-access controls federation cross-account access permission sets IAM policies and roles and emergency access practices.

• Strong AWS networking experience including multi-account and multi-region network design routing DNS load balancing private connectivity segmentation and network security controls.

• Strong Terraform experience including reusable modules multi-account deployment patterns secure remote state in Amazon S3 code review testing and lifecycle management.

• Hands-on experience building and maintaining GitHub Actions pipelines for infrastructure deployment policy enforcement and operational automation.

• Demonstrated ability to architect solutions and carry them through implementation validation documentation and production support.

• Sound judgment in ambiguous or high-pressure situations with the confidence to challenge proposals explain risk clearly and make defensible technical decisions.

• Strong scripting and automation skills in Python PowerShell or Bash.

• Working knowledge of Linux and Windows administration in production cloud environments.

• Clear written and verbal communication skills and the ability to collaborate effectively with technical teams security stakeholders leadership and vendors.

• Ability to work independently as part of a globally distributed team and to participate in on-call and planned off-hours work.

• University degree college diploma or equivalent practical experience.

• AWS certification at the Associate level or higher or equivalent demonstrated enterprise AWS expertise.

Preferred Qualifications

• Experience with Account Factory for Terraform or Customizations for AWS Control Tower.

• AWS Solutions Architect Professional Advanced Networking Specialty or Security Specialty certification.

• Experience with ECS or Fargate EC2 RDS for PostgreSQL or SQL Server S3 SQS SNS SES Amazon MQ API Gateway CloudFront and Route 53.

• Experience with enterprise configuration management and automation using Ansible Semaphore or comparable tooling.

• Experience with OpenSearch or Elasticsearch New Relic PagerDuty Datadog SolarWinds DPA or comparable observability and performance platforms

• Familiarity with Auth0 or other enterprise identity providers.

• Experience designing and testing disaster recovery across AWS accounts and regions.

• Experience in enterprise SaaS regulated industries or high-security cloud environments.

Additional Information :

Life at Assent

Wellness: We believe that you and your familys well being is important. As a result we offer vacation time that increases with tenure comprehensive benefits packages (details vary by country) life leave days and more.

Financial Benefits: Its not all about the money well its a little about the money. We understand that financial health is important and we offer a competitive base salary a corporate bonus program retirement savings options and more.

Life at Assent: There is purpose beyond your work. We provide our team members with flexible work options volunteer days and opportunities to get involved in corporate giving initiatives.

Lifelong Learning: At Assent curiosity is not only valued but encouraged. You will receive professional development days that are available to you the day you start.

At Assent we are committed to growing and sustaining an environment where our team members feel included valued and heard. Our diversity and equal opportunity practices are guided and championed by our Diversity and Inclusion Working Group and our Employee Resource Groups (ERGs).

Our commitment to diversity equity and inclusion includes recruiting and retaining team members from diverse backgrounds and experiences and fostering a culture of belonging where all team members are included treated with dignity and respect promoted on their merits and placed in positions to contribute to business success.

If you require assistance or accommodation throughout any part of the interview and selection process please contact and we will be happy to help.  

We use AI to support parts of our recruitment process such as note-taking and initial shortlisting based on job-related qualifications. AI does not make hiring decisions. All candidates will speak with a real person and final decisions are always made by our recruitment team.

Remote Work :

No

Employment Type :

Full-time