Cloud Operations Specialist

Position Summary

The Cloud Operations Specialist is responsible for ensuring the stability, security, governance, and high availability of Assent’s AWS cloud environment and SaaS production systems. This role requires deep hands-on experience with enterprise-scale AWS multi-account environments, particularly in AWS Organizations, AWS Control Tower, and AWS IAM Identity Center (SSO).

Working within the SaaS Product Infrastructure group, the Cloud Operations Specialist collaborates closely with Engineering, Product, Corporate Security, and IT teams to maintain a secure and reliable cloud platform. The ideal candidate brings strong operational discipline, long-term ownership experience, and the ability to work independently in a fast-paced, globally distributed environment. This role requires strong proficiency operating AWS governance and identity systems entirely through Infrastructure as Code (IaC), with all changes implemented through Terraform and delivered via GitHub Actions pipelines.

Key Requirements & Responsibilities 

AWS Platform Governance & Identity

• Administer and enhance Assent’s AWS multi-account environment using AWS Organizations and AWS Control Tower.

• Manage AWS Platform Governance & Identity exclusively through Infrastructure as Code (Terraform), ensuring all changes are codified, peer-reviewed, and deployed via GitHub Actions workflows, with minimal AWS console usage.

• Manage the lifecycle of AWS accounts, including provisioning, guardrail enforcement, compliance assessments, and drift remediation.

• Own configuration and governance of AWS IAM Identity Center, including permission sets, assignment models, and cross-account access patterns.

• Implement and maintain Service Control Policies (SCPs), organizational guardrails, and governance frameworks.

• Collaborate with Corporate Security on access governance, audit readiness, and implementation of cloud security best practices.

• Ensure consistent application of enterprise standards across all accounts to support scalability and operational excellence.

• Serve as a subject-matter expert for AWS organizational design, identity architecture, and governance automation.

• Infrastructure as Code, Automation & CI/CD

• Provision, manage, and govern all AWS platform resources—including Organizations, Control Tower, Identity Center, SCPs, and account lifecycle—using Terraform, following a strict code-first operating model with limited console access.

• Experience working with multi-account Terraform architectures, including reusable modules, organizational workspaces, and remote state patterns

• Operate GitHub Actions as the primary CI/CD mechanism for all governance and provisioning pipelines, ensuring consistent, validated, and compliant deployments.

• Use Lambda and automation tooling to streamline cloud governance, account lifecycle, and configuration consistency.

• Collaborate with engineering teams to enforce Infrastructure as Code standards and improve deployment consistency.

• AWS Services & Cloud Infrastructure Operations

• Support and operationalize core AWS services including:

  • Compute & containers: EC2, ECS (Fargate)

  • Databases & messaging: RDS (PostgreSQL, SQL Server), AmazonMQ

  • Networking & CDN: Route53, API Gateway, CloudFront

  • Messaging & notifications: SQS, SNS, SES

• Install, configure, secure, and troubleshoot Linux and Windows servers in cloud environments.

• Participate in infrastructure lifecycle management including patching, updates, backups, and resilience testing.

• Monitoring, Observability & Incident Response

• Proactively monitor systems and applications using observability platforms (e.g., CloudWatch, ElasticSearch/OpenSearch, New Relic, Datadog).

• May participate in an on-call rotation for production infrastructure, ensuring timely incident response and resolution.

• Implement best practices for logging, alerting, automated remediation, and operational health dashboards.

• Conduct root-cause analysis and propose long-term improvements to prevent recurrence.

• Security, Compliance & Governance Support

• Enforce cloud security policies and identity governance best practices across all AWS accounts.

• Support internal and external security audits of cloud platforms.

• Partner with Corporate Security to align cloud controls with regulatory and compliance standards.

• Maintain encryption, auditing, and configuration standards (KMS, CloudTrail, AWS Config, etc.).

• Collaboration, Documentation & Continuous Improvement

• Work closely with cross-functional teams to support platform stability and cloud adoption.

• Help lead Infrastructure and joint Infrastructure-Engineering projects.

• Create and maintain documentation for cloud architecture, governance controls, operational procedures, and automation workflows.

• Contribute to business continuity, resilience engineering, and disaster recovery planning.