Staff Systems Engineer

We are seeking a highly experienced Infrastructure Staff Engineer to drive strategy, architecture, and operations for Infrastructure as Code (IaC) across Azure, GCP, and AWS. This role requires deep expertise in PKI and certificate lifecycle management, Active Directory, infrastructure automation, and observability practices that ensure reliability, performance, and transparency across systems. You will be a technical mentor in regulated enterprise environments governed by HIPAA, HiTrust, ISO 27001, FDA, and FIPS 140-2.

Collaboration with Product teams is central: you will work closely with Product owners, engineering, SRE, QA, and Developer Enablement teams to ensure infrastructure supports evolving product requirements and enables rapid, reliable delivery of digital products.

What you'll do:

Strategy & Mentorship

• Define and implement the roadmap for automated infrastructure and process innovation across hybrid environments.
• Mentor infrastructure engineers, fostering ownership, efficiency, and compliance.
• Partner with Product teams to ensure delivery is supported by scalable, secure, and compliant infrastructure.

Product Collaboration

• Translate product requirements into secure, scalable infrastructure designs.
• Advise teams on infrastructure opportunities, limitations, and automation best practices.
• Contribute to backlog prioritization and infrastructure enhancements aligned with product goals.

Infrastructure Automation (IaC)

• Maintain automated provisioning using Terraform and Ansible, supporting CI/CD pipelines across cloud and on-prem environments with Developer Enablement teams.
• Evaluate and implement automation/orchestration tools for full lifecycle management.

PKI & Certificate Management

• Own PKI architecture and certificate lifecycle management (issuance, renewal, revocation, inventory).
• Ensure compliance with HIPAA, HiTrust, ISO 27001, FDA, and FIPS 140-2.

Active Directory & Domain Services

• Architect and manage AD domains, controllers, GPOs, and federation.
• Oversee integrations with Azure AD, Google Directory, and identity/access management automation.

Observability & Compliance

• Implement observability practices including logging, tracing, and metrics to ensure infrastructure reliability and performance.
• Design and maintain controls for HIPAA and other regulatory frameworks, ensuring audit readiness.

Operational Excellence

• Establish KPIs and SLAs for reliability, performance, and compliance.
• Drive process improvement and incident avoidance through automation and observability.
• Provide technical guidance and escalation support.

Additional Responsibilities

• Support infrastructure budget planning, vendor evaluation, and contract management.
• Align priorities with InfoSec, Compliance, and Application teams.
• Contribute to change management, incident response, and design control principles.
• Support virtualization, storage, Windows/Linux standards, and Kubernetes clusters.