[Hiring] Cloud Engineer @CPI Card Group

Role Description

CPI Card Group is seeking a Cloud Engineer with a DevSecOps focus and hands-on experience in Amazon Web Services (AWS), AWS Security Services, infrastructure automation, to join the Infrastructure Cloud Engineering team. This role implements, automates, and operates secure, resilient infrastructure capabilities across a hybrid environment that includes on-premises environments, AWS Infrastructure as a Service, and relevant SaaS integrations.

• Strengthens the Cloud Engineering organization with a focus on AWS Cloud Security and associated security services.
• Contributes to reusable infrastructure patterns, standards, guardrails, and automated controls that integrate security throughout the platform engineering and CloudOps lifecycle.
• Translates security and compliance requirements into implementable infrastructure capabilities.
• Accountable for incorporating AWS Cloud Security controls within the scope of Infrastructure Cloud Engineering.

Responsibilities

• AWS infrastructure security: Engineer and operate security capabilities supporting multi-account AWS environments, including logging, configuration compliance, threat detection, vulnerability visibility, network protection, encryption, and data protection.
• Infrastructure as Code and automated controls: Develop and maintain Terraform, AWS CloudFormation, scripts, modules, policies, and automated workflows that provision secure infrastructures and platforms.
• Secure delivery pipelines: Implement and improve infrastructure delivery pipelines, including security testing, policy checks, approval controls, and artifact integrity.
• Secure infrastructure patterns and standards: Implement and maintain secure, scalable, and resilient infrastructure patterns across AWS and hybrid integrations.
• Threat, vulnerability, and risk reduction: Automate the identification, prioritization, tracking, and remediation of infrastructure vulnerabilities.
• Hybrid infrastructure protection: Integrate security controls across on-premises environments, AWS infrastructure, and relevant SaaS services.
• Security monitoring and response: Improve infrastructure telemetry, alerting, and operational response through AWS and enterprise monitoring platforms.
• Compliance implementation and evidence: Partner with Cybersecurity to translate PCI DSS and other applicable control requirements into technical controls.
• CloudOps and platform operations: Monitor infrastructure health, security posture, reliability, and control effectiveness.
• Collaboration and documentation: Contribute to design reviews, technical documentation, and knowledge sharing.
• Continuous improvement: Evaluate relevant AWS services and industry practices, pilot improvements, and reduce manual work through automation.

Qualifications

• Designs infrastructure with day-two operations in mind, including monitoring, alerting, patching, backup, and recovery.
• Treats security controls as engineering requirements that are coded, tested, and validated in the pipeline.
• Prefers code over console changes and automates repeated manual work.
• Diagnoses issues that span AWS, networking, identity, on-premises systems, and SaaS integrations.
• Follows change management and approved standards, ensuring systems are supportable during on-call events.
• Understands ownership boundaries between Cloud Engineering and Cybersecurity.
• Recognizes when a design or request creates unacceptable risk and raises it with evidence.
• Keeps AWS, security, and automation skills current and applies learnings to improve team practices.

Requirements

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related discipline, or comparable professional experience.
• Three or more years of experience in cloud engineering, infrastructure engineering, DevOps, DevSecOps, or cloud security engineering.
• Hands-on experience deploying, securing, and operating AWS infrastructure in production or regulated hybrid environments.
• Experience implementing or improving security controls within production cloud or hybrid infrastructure.
• Proficiency with Infrastructure as Code, preferably Terraform.
• Hands-on experience with CI/CD platforms and source control, such as GitLab CI/CD, Jenkins, or AWS-native delivery services.
• Strong scripting or software automation skills using Python, Bash, PowerShell, or a comparable language.
• Experience with multi-account AWS environments, identity and access controls, logging and monitoring, and network security.
• Experience participating in infrastructure or security incident response and root-cause analysis.
• Working knowledge of regulated-industry security and compliance practices; experience with PCI DSS is preferred.

Preferred Certification and Qualification Paths

• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Associate
• AWS Certified CloudOps Engineer – Associate
• AWS Certified DevOps Engineer – Professional
• AWS Certified Solutions Architect – Professional
• AWS Certified AI Practitioner