Senior Cloud Operations Engineer

<div class="content-intro"><p><span class="TextRun SCXW107525881 BCX8" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW107525881 BCX8">At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are </span><span class="NormalTextRun SCXW107525881 BCX8">immediately</span><span class="NormalTextRun SCXW107525881 BCX8"> at risk. </span><span class="NormalTextRun SCXW107525881 BCX8">We are the global leader in </span><span class="NormalTextRun SCXW107525881 BCX8">xOT</span><span class="NormalTextRun SCXW107525881 BCX8"> cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand </span><span class="NormalTextRun SCXW107525881 BCX8">what is</span><span class="NormalTextRun SCXW107525881 BCX8"> at stake</span><span class="NormalTextRun SCXW107525881 BCX8">. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.</span></span><span class="EOP Selected SCXW107525881 BCX8" data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":0,"335559737":0,"335559738":120,"335559739":160,"335559740":360}"> </span></p></div><p><strong><span data-contrast="none">About the Role</span></strong><span data-ccp-props="{"335559738":200,"335559739":80,"335572079":6,"335572080":1,"335572081":6567967,"469789806":"single"}"> </span></p>
<p><span data-contrast="auto">We are seeking an experienced Senior Cloud Operations Engineer to join our Cloud Skill Community. This role owns the operational health of the Dragos customer cloud fleet across Azure, AWS, and GCP -- both Dragos-managed and customer-managed environments. You will drive fleet reliability, deployment automation, and day-to-day operations at scale, bringing a strong infrastructure-as-code mindset and a bias toward automation and repeatability.</span><span data-ccp-props="{"335559739":120}"> </span></p>
<p><strong><span data-contrast="none">Responsibilities</span></strong><span data-ccp-props="{"335559738":200,"335559739":80,"335572079":6,"335572080":1,"335572081":6567967,"469789806":"single"}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto"><span data-ccp-parastyle="List Bullet">Operate, </span><span data-ccp-parastyle="List Bullet">maintain</span><span data-ccp-parastyle="List Bullet">, and improve the Dragos cloud fleet across Azure, AWS, and GCP</span></span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Own the full customer environment lifecycle -- onboarding, configuration, upgrades, and off boarding</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Build and </span><span data-ccp-parastyle="List Bullet">maintain</span><span data-ccp-parastyle="List Bullet"> Terraform-based infrastructure-as-code for customer environment provisioning and fleet standardization</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Manage fleet health, drift detection, patching, and version lifecycle management at customer scale</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Design and enforce multi-tenant isolation patterns -- blast radius containment, RBAC at scale, and cross-account access controls</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Configure and </span><span data-ccp-parastyle="List Bullet">maintain</span><span data-ccp-parastyle="List Bullet"> cloud networking components across all three providers (VPCs/</span><span data-ccp-parastyle="List Bullet">VNets</span><span data-ccp-parastyle="List Bullet">, peering, transit gateways, DNS, firewalls, load balancers)</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Manage cloud-to-OT/on-prem connectivity for customer environments</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Implement and maintain IAM, secrets management, and compliance posture across cloud providers</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Build and maintain Datadog observability -- monitors, dashboards, log pipelines, and SLOs</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Participate in an on-call rotation (PagerDuty) for the Dragos cloud fleet -- triage, respond to, and resolve production incidents across customer environments</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Drive SRE practices: define SLOs, manage error budgets, </span><span data-ccp-parastyle="List Bullet">maintain</span><span data-ccp-parastyle="List Bullet"> runbooks, and lead post-incident reviews</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Support audit and compliance activities including evidence collection for FedRAMP, SOC2, and customer-specific requirements</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Identify</span><span data-ccp-parastyle="List Bullet"> and </span><span data-ccp-parastyle="List Bullet">eliminate</span><span data-ccp-parastyle="List Bullet"> toil through automation and process improvement</span><span data-ccp-props="{"335559685":576,"335559739":40}"> </span></li>
</ul>
<p><strong><span data-contrast="none">Qualifications</span></strong><span data-ccp-props="{"335559738":200,"335559739":80,"335572079":6,"335572080":1,"335572081":6567967,"469789806":"single"}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-contrast="auto"><span data-ccp-parastyle="List Bullet">4+ years of hands-on cloud operations experience across one or more of Azure, AWS, or GCP</span></span></li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-props="{"335559685":576,"335559739":40}">Cybersecurity Experience</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Strong </span><span data-ccp-parastyle="List Bullet">proficiency</span><span data-ccp-parastyle="List Bullet"> with Terraform for infrastructure-as-code (primary </span><span data-ccp-parastyle="List Bullet">IaC</span><span data-ccp-parastyle="List Bullet"> tool at Dragos)</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Experience operating cloud environments at scale -- fleet management, patching, upgrades, drift detection</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Hands-on experience with multi-tenant cloud architectures and customer-facing environment management</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Solid knowledge of cloud networking: VPCs/</span><span data-ccp-parastyle="List Bullet">VNets</span><span data-ccp-parastyle="List Bullet">, peering, transit gateways, DNS, firewalls, and hybrid connectivity</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Experience with IAM across AWS, Azure Entra ID, and/or GCP -- roles, policies, federation, SSO</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Proficiency</span><span data-ccp-parastyle="List Bullet"> with Datadog for monitoring, alerting, dashboards, and log pipelines</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Comfort with on-call responsibilities -- this role </span><span data-ccp-parastyle="List Bullet">participates</span><span data-ccp-parastyle="List Bullet"> in a PagerDuty rotation for the customer cloud fleet</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Experience with SRE practices: SLO definition, error budget management, incident response, and blameless post-mortems</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Strong scripting skills in Python and/or Bash</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Familiarity with compliance frameworks (FedRAMP, SOC2, NIST CSF) and audit evidence collection</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Strong ownership mindset and accountability for production stability</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="14" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Excellent communication, documentation, and collaboration skills</span><span data-ccp-props="{"335559685":576,"335559739":40}"> </span></li>
</ul>
<p><strong><span data-contrast="none">Preferred Qualifications</span></strong><span data-ccp-props="{"335559738":200,"335559739":80,"335572079":6,"335572080":1,"335572081":6567967,"469789806":"single"}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1"><span data-contrast="auto"><span data-ccp-parastyle="List Bullet">Experience with all three major cloud providers: Azure, AWS, and GCP</span></span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Experience managing cloud environments for external customers (customer-managed and vendor-managed models)</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Familiarity with cloud-to-OT/ICS network connectivity and segmentation</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Experience with secrets management tooling: </span><span data-ccp-parastyle="List Bullet">HashiCorp</span><span data-ccp-parastyle="List Bullet"> Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Experience with cloud-native fleet tools: AWS Systems Manager, Azure Arc, GCP Fleet Management</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Proficiency</span><span data-ccp-parastyle="List Bullet"> with policy-as-code tools (OPA, Sentinel, AWS SCPs, Azure Policy)</span> </li>
<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"singleLevel"}" data-aria-posinset="27" data-aria-level="1"><span data-ccp-parastyle="List Bullet">Experie