[Hiring] Cloud Engineer @Knack

Role Description

Knack runs thousands of customer applications across multiple global regions, including dedicated private environments. As a Cloud Engineer, you’ll own and evolve that infrastructure, harden it to meet SOC 2, HIPAA, and customer security requirements, and build the infrastructure behind our growing AI capabilities.

We’re an AI-forward team. You don’t need to type every Terraform block, but you do need to understand what’s happening, direct AI tools well, verify their work, and own the outcome. This role includes a weekly 24/7 on-call rotation.

Location:

• US Based (Full-Time, Remote) or International Contractor (Full-Time, Remote)
• If US-Based: This will be a remote position based in the United States. Employees must be available during standard US business hours and maintain their primary work location within the US. Any extended time working outside the United States requires prior written approval.
• International Contractor: This will be a full-time, remote position, but candidates must have four hours overlap with Eastern timezone.

Key Responsibilities

• Run AWS infrastructure as code, with AI in the loop.
• Manage AWS infrastructure through Terraform using our pull-request-based GitOps workflow, and resolve configuration drift across regions.
• Use AI tools to draft, review, and explain Terraform changes, then verify every plan before it merges.
• Maintain reusable modules and the standards that make AI-generated changes safe and consistent.
• Help design and operate how AI assistants work with our AWS environments.
• Define the IAM roles, permission boundaries, logging, and approval gates for AI tools.
• Evaluate AI access for blast radius and audibility.
• Enforce encryption at rest and TLS in transit, tighten IAM and S3 permissions, manage WAF rules and security headers, and rotate secrets.
• Drive pentest and audit findings to verified fixes in every environment.
• Secure the AI tooling itself, including agent credentials and secrets handling.
• Configure and maintain SOC 2 and HIPAA controls such as log retention, alarms, VPC flow logs, and backups.
• Ensure AI-assisted changes keep the same review, approval, and audit trail as any other change.
• Gather audit evidence and help maintain security tooling.
• Create dashboards and monitors that catch issues before customers do, and tune noisy alerts.
• Keep runbooks current and written for both people and AI assistants.
• Lead OS upgrades, runtime and end-of-life migrations, dependency updates, and certificate renewals.
• Tune, resize, and secure databases on multiple platforms.
• Provision or decommission dedicated customer servers for Sales and Support.
• Troubleshoot production issues for Support, Sales, and Engineering.
• Replace recurring manual tasks with automation, CI/CD improvements, or self-service tooling.
• Participate in our weekly 24/7 on-call rotation, responding to production alerts.

Qualifications

• 3-5 years in cloud infrastructure, DevOps, SRE, or platform engineering, including 2+ years in AWS production environments.
• Experience shipping infrastructure changes through code review.
• Experience operating a multi-tenant SaaS platform at scale, including participating in a 24/7 on-call rotation.
• Deep AWS knowledge across compute, networking, and security services.
• Strong Terraform understanding, including module design and state management.
• Working knowledge of cloud security fundamentals.
• Hands-on experience with monitoring and logging tools.
• Experience administering relational and NoSQL databases in production.
• Solid Linux and container (Docker) fundamentals.
• Able to read and reason about code and scripts in Python, Go, Bash, or Node.js/TypeScript.
• Daily, practical use of AI tools like Claude, with the judgment to critically review AI-generated scripts.

Preferred Qualifications

• Experience supporting compliance frameworks such as SOC 2, HIPAA, FedRAMP, or ISO 27001.
• Experience with AWS GovCloud or other regulated environments.
• A security certification or equivalent depth.
• Experience running AI/LLM infrastructure.
• Experience governing AI agent access to cloud environments.
• Familiarity with GitOps tooling for Terraform and CI/CD platforms.
• Experience with data warehouses and pipelines.
• Kubernetes/EKS experience.
• Experience at a small or early-stage company where you wore many hats.

Interviews

Interviews will be recorded and transcribed by an AI notetaking tool so our team can focus on the conversation and review it accurately later. Notes are used only for evaluating your application. You can opt out at any time by letting your recruiter know.