Senior Cloud Operations Specialist

Job Description

Position Summary

The Senior Cloud Operations Specialist is a senior technical owner for the stability, security, governance, and resilience of Assent's enterprise AWS environment and SaaS production systems. The role combines hands-on cloud operations with solution architecture, technical leadership, and sound risk-based decision making across a large multi-account AWS estate.

Working within the SaaS Product Infrastructure group, this individual partners with Engineering, Product, Corporate Security, and IT to design and operate secure, highly available cloud services. The successful candidate works independently at a high level, turns business and technical requirements into practical solutions, and constructively challenges decisions that introduce unnecessary risk, operational burden, or architectural debt.

This role follows a strict code-first and least-privilege operating model. Infrastructure changes are codified, peer-reviewed, and delivered through approved pipelines. Privileged access is exceptional, time-bound, auditable, and used only when required.

Responsibilities

Architecture Technical Leadership and Decision Making

• Lead the design and delivery of secure, scalable, resilient, and supportable AWS solutions from initial requirements through production operation.

• Translate business, security, compliance, and operational requirements into architecture decisions, implementation plans, and reusable platform patterns.

• Evaluate technical options and make clear, risk-based recommendations that balance security, reliability, maintainability, delivery speed, and cost.

• Question assumptions and respectfully challenge designs or delivery approaches that conflict with enterprise standards, least-privilege principles, reliability objectives, or long-term platform health.

• Participate in architecture and design reviews, document key decisions and tradeoffs, and ensure operational readiness before production adoption.

• Act as a senior technical escalation point, lead complex infrastructure initiatives, and coach team members through design and operational decisions.

AWS Platform Governance Identity and Privileged Access

• Own and continuously improve Assent's AWS multi-account environment using AWS Organizations, AWS Control Tower, organizational units, account lifecycle controls, guardrails, and Service Control Policies.

• Architect and operate AWS IAM Identity Center, IAM roles and policies, permission sets, trust relationships, permission boundaries, federation, and cross-account access patterns.

• Apply least privilege by default. Ensure elevated access is approved, time-bound where supported, protected by strong authentication, logged, regularly reviewed, and separated from day-to-day identities.

• Maintain controlled break-glass access and prevent shared credentials, unmanaged access paths, unnecessary standing privilege, and unreviewed administrative changes.

• Lead account provisioning, compliance assessments, access reviews, drift detection, and remediation across the AWS organization.

• Partner with Corporate Security on identity governance, audit readiness, cloud control design, and the implementation of enterprise security requirements.

Enterprise AWS Networking

• Design, operate, and troubleshoot enterprise AWS network architectures across accounts and regions, including VPCs, subnets, route tables, security groups, network ACLs, and shared network services.

• Own connectivity and traffic-flow patterns using services such as Transit Gateway, VPC peering, PrivateLink, VPN, Direct Connect, Route 53, Elastic Load Balancing, API Gateway, and CloudFront.

• Design secure ingress, egress, segmentation, DNS, and service-to-service connectivity patterns using AWS Network Firewall, AWS WAF, VPC endpoints, flow logs, and centralized inspection where appropriate.

• Diagnose complex routing, name resolution, load-balancing, firewall, latency, and cross-account connectivity issues and drive permanent corrective action.

• Maintain current network diagrams, traffic-flow documentation, connectivity standards, and recovery procedures.

Infrastructure as Code Automation and Delivery

• Provision and govern AWS platform resources through Terraform using reusable modules, secure remote state, controlled workspaces, and maintainable multi-account patterns.

• Use GitHub Actions as the primary delivery mechanism for infrastructure and governance changes, with peer review, validation, security checks, approvals, and traceable deployment records.

• Uphold a no unmanaged changes standard. Use AWS console access only for approved operational needs, and codify or reconcile any necessary emergency change promptly.

• Build automation with Python, PowerShell, Bash, Lambda, Ansible, Semaphore, or similar tools to reduce manual effort, enforce consistency, and improve recovery time.

• Review infrastructure code and automation for security, reliability, maintainability, and alignment with enterprise standards.

Cloud Operations Reliability and Incident Response

• Operate and improve core AWS services across compute, containers, databases, storage, messaging, DNS, content delivery, security, and monitoring.

• Install, configure, secure, patch, and troubleshoot Linux and Windows workloads in cloud environments.

• Establish effective monitoring, logging, alerting, dashboards, and automated remediation using CloudWatch, OpenSearch or Elasticsearch, New Relic, PagerDuty, or comparable platforms.

• Lead or support high-severity incident response, communicate clearly under pressure, restore service safely, and coordinate across technical and business teams.

• Conduct root-cause analysis and ensure corrective actions address underlying technical and process failures rather than only immediate symptoms.

• Participate in the on-call rotation and planned off-hours work required to support production infrastructure.

Security Compliance Resilience and Operational Ownership

• Maintain enterprise standards for encryption, key management, audit logging, configuration compliance, vulnerability remediation, and evidence collection using services such as KMS, CloudTrail, and AWS Config.

• Support internal and external audits and provide clear evidence of cloud controls, access governance, and operational processes.

• Design, implement, and test backup, business continuity, disaster recovery, and multi-region resilience capabilities.

• Create and maintain accurate documentation for cloud architecture, governance controls, operational procedures, automation workflows, and support handoffs.

• Take end-to-end ownership of assigned platforms and initiatives, surface risks early, and follow decisions through implementation and operational acceptance.

Qualifications

Minimum Requirements

• 7 or more years of relevant experience in cloud operations, platform engineering, infrastructure engineering, or systems administration, including substantial hands-on responsibility for enterprise AWS environments.

• Proven long-term ownership of a multi-account AWS organization using AWS Organizations, AWS Control Tower, and AWS IAM Identity Center.

• Deep experience with enterprise AWS governance, including organizational design, account provisioning, Service Control Policies, guardrails, configuration compliance, and drift remediation.

• Advanced knowledge of AWS identity and access management, including least privilege, privileged-access controls, federation, cross-account access, permission sets, IAM policies and roles, and emergency access practices.

• Strong AWS networking experience, including multi-account and multi-region network design, routing, DNS, load balancing, private connectivity, segmentation, and network security controls.

• Strong Terraform experience, including reusable modules, multi-account deployment patterns, secure remote state in Amazon S3, code review, testing, and lifecycle management.

• Hands-on experience building and maintaining GitHub Actions pipelines for infrastructure deployment, policy enforcement, and operational automation.

• Demonstrated ability to architect solutions and carry them through implementation, validation, documentation, and production support.

• Sound judgment in ambiguous or high-pressure situations, with the confidence to challenge proposals, explain risk clearly, and make defensible technical decisions.

• Strong scripting and automation skills in Python, PowerShell, or Bash.

• Working knowledge of Linux and Windows administration in production cloud environments.

• Clear written and verbal communication skills and the ability to collaborate effectively with technical teams, security stakeholders, leadership, and vendors.

• Ability to work independently as part of a globally distributed team and to participate in on-call and planned off-hours work.

• University degree, college diploma, or equivalent practical experience.

• AWS certification at the Associate level or higher, or equivalent demonstrated enterprise AWS expertise.

Preferred Qualifications

• Experience with Account Factory for Terraform or Customizations for AWS Control Tower.

• AWS Solutions Architect Professional, Advanced Networking Specialty, or Security Specialty certification.

• Experience with ECS or Fargate, EC2, RDS for PostgreSQL or SQL Server, S3, SQS, SNS, SES, Amazon MQ, API Gateway, CloudFront, and Route 53.

• Experience with enterprise configuration management and automation using Ansible, Semaphore, or comparable tooling.

• Experience with OpenSearch or Elasticsearch, New Relic, PagerDuty, Datadog, SolarWinds DPA, or comparable observability and performance platforms

• Familiarity with Auth0 or other enterprise identity providers.

• Experience designing and testing disaster recovery across AWS accounts and regions.

• Experience in enterprise SaaS, regulated industries, or high-security cloud environments.

Additional Information

Life at Assent

Wellness: We believe that you and your family’s well being is important. As a result, we offer vacation time that increases with tenure, comprehensive benefits packages (details vary by country), life leave days and more.

Financial Benefits: It’s not all about the money – well, it’s a little about the money. We understand that financial health is important and we offer a competitive base salary, a corporate bonus program, retirement savings options and more.

Life at Assent: There is purpose beyond your work. We provide our team members with flexible work options, volunteer days and opportunities to get involved in corporate giving initiatives.

Lifelong Learning: At Assent, curiosity is not only valued but encouraged. You will receive professional development days that are available to you the day you start.

At Assent, we are committed to growing and sustaining an environment where our team members feel included, valued, and heard. Our diversity and equal opportunity practices are guided and championed by our Diversity and Inclusion Working Group and our Employee Resource Groups (ERGs).

Our commitment to diversity, equity and inclusion includes recruiting and retaining team members from diverse backgrounds and experiences, and fostering a culture of belonging where all team members are included, treated with dignity and respect, promoted on their merits, and placed in positions to contribute to business success.

If you require assistance or accommodation throughout any part of the interview and selection process, please contact [email protected] and we will be happy to help.  

We use AI to support parts of our recruitment process, such as note-taking and initial shortlisting based on job-related qualifications. AI does not make hiring decisions. All candidates will speak with a real person, and final decisions are always made by our recruitment team.