Senior Cloud Operations Engineer

Role Overview

Senior Cloud Operations Engineer (Cloud Skill Community)

Join a remote-first, mission-driven team to own the operational health of Dragos’s customer cloud fleet across Azure, AWS, and GCP. You will drive fleet reliability, deployment automation, and day-to-day operations at scale, with a strong infrastructure-as-code and automation mindset.

Responsibilities

• Operate and improve the Dragos cloud fleet across Azure, AWS, and GCP (Dragos-managed and customer-managed environments)
• Own the customer environment lifecycle: onboarding, configuration, upgrades, and offboarding
• Build and maintain Terraform-based infrastructure-as-code for provisioning and fleet standardization
• Manage fleet health, drift detection, patching, and version lifecycle at customer scale
• Design and enforce multi-tenant isolation patterns, including:
  • Blast radius containment
  • RBAC at scale
  • Cross-account access controls
• Configure and maintain cloud networking across providers (VPCs/VNets, peering, transit gateways, DNS, firewalls, load balancers)
• Manage cloud-to-OT/on-prem connectivity for customer environments
• Implement and maintain IAM, secrets management, and compliance posture across cloud providers
• Build and maintain Datadog observability (monitors, dashboards, log pipelines, SLOs)
• Participate in an on-call rotation (PagerDuty) and respond to/resolve production incidents
• Drive SRE practices: define SLOs, manage error budgets, maintain runbooks, lead post-incident reviews
• Support audit and compliance evidence collection for FedRAMP, SOC 2, and customer-specific requirements
• Identify and eliminate toil through automation and process improvement

Qualifications

• 4+ years of hands-on cloud operations experience across Azure, AWS, or GCP
• Strong proficiency with Terraform (primary IaC tool)
• Experience operating cloud environments at scale (fleet management, patching, upgrades, drift detection)
• Hands-on experience with multi-tenant cloud architectures and customer-facing environment management
• Strong cloud networking knowledge (VPCs/VNets, peering, transit gateways, DNS, firewalls, hybrid connectivity)
• Experience with IAM across AWS, Azure Entra ID, and/or GCP (roles/policies, federation, SSO)
• Proficiency with Datadog (monitoring, alerting, dashboards, log pipelines)
• Comfort with on-call responsibilities via PagerDuty
• SRE experience: SLO definition, error budget management, incident response, blameless post-mortems
• Scripting skills in Python and/or Bash
• Familiarity with compliance frameworks: FedRAMP, SOC 2, NIST CSF (audit evidence collection)
• Strong ownership, production stability mindset
• Excellent communication, documentation, and collaboration skills

Preferred Qualifications

• Experience with all three major cloud providers (Azure, AWS, and GCP)