10+ years of experience in systems, cloud, infrastructure, security, or platform engineering, with a track record of setting technical direction and delivering durable, organization-wide outcomes that outlast your own involvement.
Deep, hands-on expertise in at least one major cloud (AWS preferred) and working expertise across all three of AWS, Azure, and GCP, including account and project structure, networking, hardening, and large-scale cleanup or consolidation of existing environments.
Strong experience designing Terraform (or equivalent) modules and pipelines at scale, with PR-based controls, policy checks, and tools such as Atlantis, Argo, or comparable systems.
Solid experience with VPN, ZTNA, and SASE technologies (such as Twingate, Cloudflare, Palo Alto Networks GlobalProtect or Prisma Access), routing, allowlisting, egress NAT, DNS, and segmented or FedRAMP environments.
Ability to design maintainable, tested automation in Python, Go, or shell, and to run the orchestration and CI platforms behind it (Rundeck, Semaphore, Workato, Cloud Run, Cloud Functions, or similar).
Working knowledge of Vault or comparable secrets platforms, service-account lifecycle, and workload identity federation, plus enough grounding in OAuth 2.0/OIDC, SAML, and SCIM to partner effectively with identity teams.
Deep Okta or IGA administration is not required.
Experience operating Kubernetes (GKE preferred), managed databases, DNS, load balancers, and TLS in production, with sound observability and capacity practices.
Strong incident-management and troubleshooting instincts across system boundaries; comfortable with on-call practices, PagerDuty, logging and monitoring, SIEM alerts, and root-cause analysis.
Experience supporting or leading technical controls and evidence for FedRAMP, SOC 2, ISO 27001, or similar frameworks, with a practical understanding of least privilege and JIT access.
Experience leading multi-quarter, cross-team initiatives such as platform consolidation, migration, or post-acquisition integration.
