Senior Cloud Engineer

impact.com is the world’s leading commerce partnership marketing platform, transforming the way businesses grow by enabling them to discover, manage, and scale partnerships across the entire customer journey. From affiliates and influencers to content publishers, brand ambassadors, and customer advocates, impact.com empowers brands to drive trusted, performance-based growth through authentic relationships. Its award-winning products—Performance (affiliate), Creator (influencer), and Advocate (customer referral)—unify every type of partner into one integrated platform. As consumers increasingly rely on recommendations from people and communities they trust, impact.com helps brands show up where it matters most. Today, over 5,000 global brands, including Walmart, Uber, Shopify, Lenovo, L’Oréal, and Fanatics, rely on impact.com to power more than 225,000 partnerships that deliver measurable business results.

As impact.com scales, we require a Senior Cloud Engineer to serve as a technical specialist for our infrastructure substrate. You will be part of a specialised squad (IaC & Provisioning,

Observability, SRE, SecOps, or FinOps) focused on ensuring that production environments are stable, observable, secure, and cost-effective. In this role, you treat the infrastructure layer as a capability provider to the rest of the engineering organisation. You are responsible for executing the technical roadmap, covering everything from IaC evolution and GCP/AWS Kubernetes and compute management to vulnerability remediation and observability standards.

Key Responsibilities

• Author, maintain, and version high-quality IaC modules (Terraform) for GCP and AWS services, ensuring they are consumable by platform engineering.
• Deploy and maintain foundational networking topology, VPCs, DNS, and IAM primitives.
• Manage the lifecycle of GKE/EKS clusters and compute instances, including the maintenance of secure base images and container standards.
• Drive drift detection and remediation, ensuring automated scans run daily with remediation completed within 24 hours.

• Maintain observability backends (metrics pipelines, log storage, and alerting) to ensure infrastructure-layer monitoring standards are met.
• Ensure log pipeline uptime of 99.9% and maintain an alert accuracy rate of < 5% false positives for P1/P2 alerts.
• Participate in stress testing and capacity planning to ensure infrastructure can scale safely.
• Reduce toil through automation, contributing to at least one major toil reduction initiative per quarter.

• Participate in the infrastructure on-call rotation, acknowledging P1 incidents within 5 minutes and aiming for an MTTR of < 30 minutes.
• Execute vulnerability remediation and security patching on advisories from the SOC: Critical (48 hours) and High (7 days).
• Ensure patch compliance for > 95% of systems and conduct quarterly access reviews.
• Draft and publish blameless post-mortems within 5 working days of resolving infrastructure incidents.

• Support cloud spend governance by identifying rightsizing opportunities and reserved instance strategies.
• Flag regional spend anomalies (> 10% deviation) within 24 hours of detection.

• 5+ years of experience in cloud infrastructure, SRE, or platform operations.
• Hands-on experience operating infrastructure at scale in GCP (preferred) and AWS.
• Proficiency with Terraform, Kubernetes (GKE), and observability stacks like Prometheus, Grafana, or Open Telemetry.
• Experience with security patching, access controls, and Google SREprinciples (error budgets, SLOs).

• Maintain 99.99% availability for cloud infrastructure per year.
• Target > 90% IaC module coverage for all provisioned infrastructure.
• Acknowledge SOC advisories within 4 hours and triage within 1 working day.
• Delivery of new standard environments within 2 working days.

To maintain focus, this role does not own:

• Application-level business logic or shared libraries.
• Developer-facing observability standards or CI/CD deployment tooling.
• Security policy and risk management frameworks (owned by the Security department).