Senior Cloud Infrastructure Engineer

We are seeking a Senior Cloud Infrastructure Engineer. In this role you design, build and operate secure, compliant cloud environments that support engineering, manufacturing and business operations at Astronautics Corporation of America and Kearfott Corporation. You will bring deep expertise in at least one of GCP, AWS or Azure and help shape how our teams use all three platforms. Working closely with Infrastructure, Cybersecurity and business partners, you will turn business needs into reliable cloud solutions while protecting Controlled Unclassified Information (CUI) and export-controlled technical data. You will also own the operational documentation that helps support, infrastructure and cybersecurity teams run these environments every day.

This hybrid on-site position is located at our Headquarters in Oak Creek, WI. You will report directly to the Senior Manager, Cybersecurity & I.T. Infrastructure.

• Design, build and maintain cloud infrastructure across GCP, AWS and Azure, including government and sovereign cloud environments such as GCP Assured Workloads, AWS GovCloud, Azure Government and GCC-High.
• Build reusable, version-controlled landing zones and infrastructure-as-code modules using Terraform or OpenTofu and cloud-native tools such as Bicep/ARM and CloudFormation.
• Create CI/CD pipelines for infrastructure changes with automated testing, peer review and policy-as-code controls such as OPA, Sentinel or Checkov.
• Harden operating systems and cloud platforms using Ansible or similar tools, applying and maintaining DISA STIG and CIS baselines.
• Implement and validate CMMC Level 2 and NIST SP 800-171 controls. Design for ITAR and EAR requirements, including U.S. data residency, U.S. Person access, encryption and key management.
• Produce and maintain compliance evidence, including System Security Plan inputs, configuration baselines, architecture diagrams and audit artifacts for C3PAO assessments.
• Monitor for and correct configuration drift, and manage infrastructure changes through formal change control.
• Work with cybersecurity, identity and endpoint teams on logging, monitoring, access management and incident response across on-premises and cloud environments, including Active Directory and Entra ID.
• Gather requirements from business leaders, application owners and project teams. Translate functional and non-functional needs—including availability, performance, scalability, recovery, compliance and data sensitivity—into clear technical designs.
• Evaluate cloud platforms, services and deployment patterns, weighing cost, security, compliance, performance, resiliency and supportability. Estimate the cost, effort and risk of proposed solutions and apply FinOps practices to manage costs over time.
• Lead solutions from concept through design, implementation, operational handoff and support. Document designs and decisions, and present recommendations to technical and non-technical stakeholders.
• Write and maintain runbooks, standard operating procedures, architecture and network diagrams, configuration standards, troubleshooting guides and knowledge base articles for the teams that rely on them.
• Publish documentation in the IT service management platform and link it to change records. Keep documentation current as systems change, and make documentation review part of infrastructure delivery.
• Establish documentation templates, standards and review cycles. Prepare new services for operations through walkthroughs, training and support-readiness reviews.
• Mentor engineers and help set infrastructure engineering standards across the organization.

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering or a related field, with at least 10 years of experience in infrastructure, systems or cloud engineering, including at least 7 years building production cloud environments. A minimum of 10 years of directly relevant experience may be accepted in lieu of a degree.
• Expert-level, hands-on experience with at least one of GCP, AWS or Azure, along with the ability and willingness to become proficient in the other two.
• Strong Terraform or OpenTofu experience, including module design, state management, workspaces and testing.
• Working experience with at least one cloud-native infrastructure-as-code tool, such as Bicep/ARM, CloudFormation, GCP Deployment Manager or Config Connector.
• Experience with configuration management tools such as Ansible and Git-based CI/CD platforms such as GitHub Actions, Azure DevOps or GitLab CI.
• Hands-on experience implementing security controls in regulated environments, such as CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP or DFARS 252.204-7012.
• Strong understanding of cloud networking, identity and access management, encryption and key management, and centralized logging.
• Scripting experience in Python, PowerShell or Bash.
• Strong technical writing skills, including the ability to explain complex infrastructure in clear runbooks, procedures, architecture documents and knowledge articles for technical and non-technical audiences.
• Experience creating operational documentation that service desk, operations or security teams use to support systems independently. Please be prepared to share sanitized writing samples.
• Experience using diagramming tools such as Visio, Lucidchart or draw.io to create architecture, network or data-flow diagrams.
• Experience gathering business requirements and turning them into cloud solution architectures, design documentation and stakeholder presentations.
• Sound architectural judgment and the ability to explain trade-offs among cost, security, performance, resiliency and operational complexity.
• Working knowledge of cloud architecture frameworks, such as AWS Well-Architected, Microsoft Azure Well-Architected and Google Cloud Architecture Framework.

• Experience with government or sovereign cloud offerings, such as AWS GovCloud, Azure Government or Microsoft 365 GCC-High, or GCP Assured Workloads.
• Direct participation in a CMMC Level 2 assessment, DIBCAC review or FedRAMP authorization.
• Experience building ITAR-compliant enclaves or CUI data boundaries.
• Policy-as-code experience with OPA/Rego, HashiCorp Sentinel or Checkov.
• Kubernetes experience with GKE, EKS or AKS, including container security hardening.
• Hybrid infrastructure experience with on-premises Active Directory, VMware or Hyper-V, and cloud identity federation.
• Experience managing knowledge bases in an ITSM platform such as Ivanti Neurons or ServiceNow, and familiarity with ITIL change and knowledge management processes.
• Docs-as-code experience, including Markdown, Git-managed documentation or tools such as terraform-docs.
• Experience writing System Security Plans, control implementation statements or other compliance documentation.
• Experience as a solutions architect or cloud architect, or supporting multiple business units or legal entities with shared infrastructure.
• Cloud cost management and FinOps experience, including cost modeling, budgeting and optimization.
• Familiarity with architecture modeling approaches such as the C4 model, TOGAF or architecture decision records.
• Relevant certifications, such as Google Professional Cloud Architect, AWS Solutions Architect Professional, Azure Solutions Architect Expert, HashiCorp Terraform Associate, CISSP or CCSP.

We are a team that designs computers, displays and electronic systems for aircraft of the future! At Astronautics, you will be part of a creative group of professionals who work on the cutting-edge of technology. We offer competitive pay, excellent benefits and the opportunity for professional growth in a collaborative environment.

 Astronautics, headquartered in Oak Creek, Wisconsin, is a global leader in the design, development and manufacture of secure avionics equipment and systems for the commercial and military aerospace industry.   Key product areas include electronic primary flight and engine displays, connected aircraft and cyber solutions, electronic flight bags, and certified servers for airborne applications. Services include avionics system integration and custom software for critical applications. Since its founding in 1959, Astronautics has been providing trusted, reliable, and tailored solutions to help customers achieve mission success. Astronautics is the parent company of Kearfott Corporation, headquartered in Pine Brook, New Jersey.

We are proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment.