Cloud Engineer

Knack runs thousands of customer applications across multiple global regions, including dedicated private environments. As a Cloud Engineer, you’ll own and evolve that infrastructure, harden it to meet SOC 2, HIPAA, and customer security requirements, and build the infrastructure behind our growing AI capabilities.

We’re an AI-forward team. You don’t need to type every Terraform block, but you do need to understand what’s happening, direct AI tools well, verify their work, and own the outcome. This role includes a weekly 24/7 on-call rotation.

• →3-5 years in cloud infrastructure, DevOps, SRE, or platform engineering, including 2+ years working in AWS production environments. Looking for someone who has experience shipping infrastructure changes through code review. Depth matters more than the number.
• →Experience operating a multi-tenant SaaS platform at scale, including participating in a 24/7 on-call rotation.
• →A degree is not required. Demonstrated hands-on experience counts equally.

• Deep AWS knowledge across compute, networking, and security services, such as EC2, ECS/Fargate, Lambda, VPC, IAM, S3, CloudFront, and RDS.
• Strong Terraform understanding, including module design, state management, and pull-request-based CI/CD workflows. You can read a plan and explain what will be created, changed, or destroyed, and where the risk is.
• Working knowledge of cloud security fundamentals: least-privilege IAM, encryption in transit and at rest, network security groups and WAFs, secrets management, and vulnerability remediation.
• Hands-on experience with monitoring and logging tools and building actionable alerts.
• Experience administering relational and NoSQL databases in production.
• Solid Linux and container (Docker) fundamentals.
• Able to read and reason about code and scripts in Python, Go, Bash, or Node.js/TypeScript, including large JavaScript/TypeScript codebases when tracing infrastructure-related bugs. You do not need to write them from scratch.

• Daily, practical use of AI tools like Claude, with the judgment to critically review AI-generated scripts, Terraform, and IAM policies, and accountability for everything you ship.

• Experience supporting compliance frameworks such as SOC 2, HIPAA, FedRAMP, or ISO 27001, including evidence collection and control implementation.
• Experience with AWS GovCloud or other regulated or isolated environments.
• A security certification or equivalent depth, such as AWS Certified Security - Specialty, CompTIA Security+, or CCSP, or experience with SIEM, intrusion detection, or threat modeling.
• Experience running AI/LLM infrastructure, such as Amazon Bedrock, LLM gateways, vector databases, or MCP servers.
• Experience governing AI agent access to cloud environments, including scoped IAM roles, session logging, and approval workflows.
• Familiarity with GitOps tooling for Terraform and CI/CD platforms such as CircleCI, GitHub Actions, or AWS CodeBuild.
• Experience with data warehouses and pipelines (for example, Redshift and ETL tooling).
• Kubernetes/EKS experience.
• Experience at a small or early-stage company where you wore many hats.

Interviews will be recorded and transcribed by an AI notetaking tool so our team can focus on the conversation and review it accurately later. Notes are used only for evaluating your application. You can opt out at any time by letting your recruiter know.