What are the responsibilities and job description for the Cloud Infrastructure Engineer L2 / Cloud Engineer II position at Astreya?
Cloud Infrastructure Engineer (L2)
About the Job
The Cloud Infrastructure Engineer builds and sustains the cloud, virtualized and physical server infrastructure that runs the enterprise physical security estate like cameras, access control, readers, intercoms and the servers. This is a hands-on implementation role. Working from the architecture and standards set by the senior and principal engineers, you will deploy GCP environments, provision and image physical servers, automate configuration through Terraform and Ansible, administer Linux and Windows systems, maintain patch and vulnerability compliance across the fleet, and keep infrastructure inventory accurate. The role suits an engineer who is equally comfortable with cloud-native services and with the operating system, firmware and hardware management layers beneath them.
Key Responsibilities
- Implement and configure GCP environments (Compute Engine, Cloud Storage with retention policies, VPC networking, IAM) for centralized security applications, working to the design standards set by L3 and L4 engineers.
- Own end-to-end server provisioning: OS imaging, build automation, iDRAC configuration and registration, asset and inventory registration, and handover to operations.
- Qualify new Dell server SKUs and operating system builds for the approved hardware catalog, including firmware baselines and driver validation.
- Build and maintain virtualized on-premises and cloud-hosted infrastructure across Linux and Windows client and enterprise operating systems.
- Deploy high-availability mechanisms (failover, hot-swap and cold-swap, clustering, load-balancing) and validate redundancy behavior after implementation.
- Operate Windows Update and patch automation across the corporate server fleet; remediate patching compliance exceptions and report on coverage.
- Execute continuous vulnerability scanning and remediation across the server fleet and GCP development, UAT and production projects; track findings to closure against program SLAs.
- Maintain infrastructure inventory accuracy in the program inventory and source-of-truth systems, reconciling discovered state against recorded state.
- Author and maintain Infrastructure as Code using Terraform and Ansible; contribute to orchestration and configuration management through Puppet, Git and PowerShell.
- Automate routine provisioning and sustainment tasks to reduce manual effort and configuration drift.
- Provision and administer infrastructure IAM across operating systems and cloud, enforcing least-privilege and least-service models.
- Configure tiered storage and database resources in line with retention, uptime and auditability requirements.
- Apply device and infrastructure security hardening to the hosts supporting physical security products such as camera management, access control and device management platforms.
- Provide implementation-tier support for escalations from operations and sustainment teams, escalating design-level issues to L3 with detailed handover notes.
- Produce and maintain runbooks, configuration records and Technical Design Documentation (TDD) artifacts.
Mandatory Skills
Candidates must demonstrate the following to be considered.
- 5 to 8 years of hands-on experience in cloud and enterprise infrastructure engineering, with demonstrated delivery in production environments.
- Working proficiency in GCP core services — Compute Engine, Cloud Storage, VPC and IAM — and cloud-native high-availability patterns.
- Hands-on Infrastructure as Code with Terraform and Ansible, in production, not in a lab only.
- Scripting competency in either of Python, Bash or PowerShell
- Strong Windows Server administration, including patch management and update automation at fleet scale.
- Strong Linux administration (RHEL or Ubuntu).
- Server lifecycle experience: Dell server platforms, iDRAC out-of-band management, firmware baselines, OS imaging and automated build.
- Virtualization administration (VMware or Hyper-V).
- IAM provisioning across operating system and cloud (Active Directory, Google IAM, RBAC) under least-privilege enforcement.
- Vulnerability management and patch compliance practice: running scans, interpreting findings, driving remediation, and reporting coverage.
- Clear technical documentation: runbooks, configuration records and TDD contributions.
- Based in or able to work from Boulder, Colorado, with willingness to work business hours and participate in on-call escalation in a global support model.
Good-to-Have Skills
These strengthen an application but will not screen a candidate out.
- Puppet and DellOME for configuration management and hardware fleet management.
- NetBox or a comparable source-of-truth or DCIM platform.
- Experience supporting physical security systems: camera management platforms, access control systems, or IoT device management.
- Exposure to enterprise endpoint management tooling (SCCM, Intune, WSUS or equivalent).
- Tiered storage and database configuration against retention, uptime and auditability requirements.
- Experience working inside a formal program governance model with SLAs and KPIs.
Certifications
Level
Certification
Required
GCP Associate Cloud Engineer, or GCP Professional Cloud Architect
Preferred
HashiCorp Terraform Associate; Microsoft Windows Server certification
Beneficial
Red Hat RHCSA or RHCE; ITIL 4 Foundation