Note: The job is a remote job and is open to candidates in USA. Hampton North is a fast-growing cybersecurity consulting firm seeking a Cloud & Infrastructure Engineer for a senior-level role. The engineer will lead the design and implementation of secure Infrastructure as Code (IaC) environments across major cloud platforms, ensuring compliance with various frameworks while collaborating directly with client teams.

Responsibilities

• Design, implement, and maintain CI/CD pipelines that enforce automated security gates, policy-as-code checks, and compliance validation before deployment
• Build and maintain a library of secure, reusable Terraform modules that encode compliance requirements—FedRAMP, SOC 2, ISO 27001, CMMC—directly into infrastructure
• Own security architecture decisions across cloud deployments: IAM design, network segmentation, secrets management, logging and monitoring pipelines, and encryption controls
• Identify manual or repetitive processes and replace them with reliable, scalable automation
• Partner directly with client engineering and compliance teams to translate regulatory and security requirements into executable infrastructure solutions
• Document and communicate architectural decisions clearly to both technical and non-technical stakeholders
• Contribute to internal tooling, methodology, and standards as an early member of a growing practice

Skills

• 3+ years of professional experience in cloud infrastructure or DevSecOps, with a focus on Terraform and reusable module creation in at least one major cloud platform (AWS, GCP, or Azure)
• 1+ year of hands-on Terraform in enterprise environments, including integration with CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, or equivalent)
• Strong cloud security fundamentals: IAM, networking, secrets management, encryption, and monitoring
• Familiarity with CSPM tools such as Prisma Cloud, Wiz, Lacework, AWS Security Hub, or AWS Inspector
• Proficiency in Python or Bash scripting
• Experience securely configuring Linux operating systems including DISA STIG hardening
• Solid understanding of compliance frameworks: FedRAMP, FISMA, CMMC Level 2, SOC 2, etc
• AWS Solutions Architect Associate certification required
• AWS Solutions Architect Professional, Security Specialty, GCP, or Azure equivalents
• Experience with SAST/DAST tooling (SonarQube, Snyk, Burp Suite, Tenable/Nessus, or similar)
• Experience with containerization, Kubernetes, and secure hardening

Benefits

• Bonus

Company Overview