Staff Cloud Infrastructure Engineer
Share
Job Location:
Chicago, IL - USA
Monthly Salary:
$ 190000 - 220000
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Job Summary
Were looking for a Staff Cloud Infrastructure Engineer to design build and operate scalable secure and highly available cloud platforms on AWS. Youll own Infrastructure-as-Code (Terraform) container orchestration (EKS) GitHub-based workflows (Actions source control) GitOps (Argo/Argo CD) and end-to-end CI/CD strategies with strong observability.
What Youll Do
- Architect and deliver AWS infrastructure using Terraform (modular reusable versioned IaC) across multiple accounts and environments
- Design deploy and harden EKS clusters (networking autoscaling security ingress service mesh optional) and standardize app deployment patterns
- Implement GitOps with Argo/Argo CD (ApplicationSets sync policies RBAC SSO secrets management progressive delivery)
- Build CI/CD pipelines with GitHub Actions (reusable workflows artifact strategy rollouts/rollbacks automated quality gates)
- Define SLI/SLOs and enable observability with metrics logs traces alerting and runbooks using best-in-class tools
- Drive platform reliability and security: patching upgrades backups disaster recovery IAM least privilege secrets and compliance guardrails
- Optimize performance and cost: autoscaling right-sizing spot/on-demand strategies efficiency dashboards
- Partner with developers to create golden paths templates and documentation that accelerate safe delivery
- Participate in on-call lead incident RCAs and drive improvements through code and process changes
Required Experience
- 10-15 years of experience building and operating production cloud infrastructure (preferably AWS)
- Strong Terraform expertise: modules workspaces state management CI validation (fmt/validate/tflint) policy as code (Sentinel/OPA)
- GitHub & GitHub Actions: branch protection environments reusable workflows OIDC to AWS secrets/variables caching matrices
- AWS services: VPC IAM EKS ALB/NLB EC2/EKS node groups ECR RDS/ElastiCache S3 CloudWatch/CloudTrail KMS Secrets Manager
- EKS & container orchestration: Helm/Kustomize rollout strategies cluster autoscaler networking (CNI/ingress) HPA/PDBs
- Argo & Argo CD: Applications & ApplicationSets sync/health checks drift detection RBAC SSO
- Observability tools: metrics/logs/traces (Prometheus/Grafana OpenTelemetry Datadog New Relic Honeycomb CloudWatch ELK/OpenSearch)
- CI/CD strategies: trunk-based quality gates (tests SAST/DAST IaC scans) artifact/versioning environment promotions canary/blue-green
- Strong scripting (Bash/Python) configuration tooling (Helm/Kustomize) solid Linux and networking fundamentals
- Clear communicator with a bias for automation documentation and collaborative problem-solving
Nice to Have
- Service Mesh (Istio/Linkerd) progressive delivery (Argo Rollouts/Flagger)
- Security tooling (Snyk Trivy AWS Security Hub IAM Access Analyzer)
- Data plane experience (Kafka/MSK Redis/ElastiCache RDS/Aurora operations)
- Cost management/FinOps exposure for Kubernetes and AWS
For US-based employees the cash compensation range for this role is$190000-$220000.We set standard ranges for all US roles based on function level and geographic location benchmarked against similar stage growth companies. To comply with local legislation and provide greater transparency to candidates we share salary ranges on all job postings regardless of desired hiring location. Howeverthese ranges are specific to the hiring location and may differ within or outside the US.Final offer amounts are determined by multiple factors including geographic location as well as candidate experience and expertise and may vary from the amounts listed above.
Required Experience:
Staff IC
Key Skills
- Jenkins
- Ruby
- Python
- Active Directory
- Cloud
- PowerShell
- Windows
- AWS
- Linux
- SAN
- Java
- Troubleshoot
- Backup
- Puppet
- hardware
About Company
The Fingerprint device intelligence platform works across web and mobile applications to identify all visitors with industry-leading accuracy — even if they’re anonymous.
