Senior Cloud Infrastructure Engineer, Cloud Foundations

*Note: This position requires presence in our San Francisco/San Jose/Bellevue office location 4 days per week; Lambda’s designated work from home day is currently Tuesday.

Cloud Foundations manages the account, access, and network foundation that Lambda's cloud infrastructure runs on, implementing governance and access controls in line with company policies. In practice that means AWS accounts and IAM, the VPC and transit network structure, DNS, and the Terraform execution platform that every change flows through.

This is a new team, and this role helps define it. Working closely with Security, GRC, IT, and the engineering teams that consume the foundation, this position turns policy into working controls and paved paths, so that hundreds of engineers can safely self-serve instead of filing requests.

• Own and evolve the IaC execution platform (Terraform, Atlantis): how infrastructure changes are proposed, reviewed, and applied across the company
• Design and operate Lambda's cloud account, access, and IAM structure: organizational hierarchy, provisioning, and permission models
• Own the cloud network foundation: VPCs, Transit Gateway, and DNS, including the patterns other teams build on
• Drive AWS cloud governance: tagging standards, compliance guardrails, and cost visibility and accountability
• Implement least-privilege access and compliance automation in line with company requirements and policies, replacing manual access and provisioning work with self-service
• Help shape how this new team operates: its scope, priorities, and service boundaries
• Participate in an on-call rotation and keep the systems you own well-documented, reliable, and observable
• 6+ years of experience in cloud infrastructure, cloud platform, or cloud security engineering, or a closely related discipline
• Deep experience managing AWS at scale: multi-account organizations, IAM and permission boundaries, SCPs, and resource organization
• Strong foundation in infrastructure-as-code (Terraform) and the tooling around it: modules, state management, and automated plan/apply workflows
• Solid cloud networking fundamentals: VPC design, transit and hybrid connectivity, DNS, and edge/CDN configuration
• Comfortable writing the automation and tooling that runs the foundation (Go and/or Python), and treating it as a product: real users, real quality standards, and things that actually get adopted
• Use AI tools as a natural part of how you work, and hold their output to the same bar as your own: you review it, verify it, and own what ships
• Build for the many, not for one team or one use case
• Comfortable with ambiguity and clarifying ownership
• Distill the right problem out of the noise: ask the why behind the why
• Own what you build past the point it ships: monitor it, measure whether it actually helped, and act on what you learn
• Sweat the details and aren't satisfied until things run smoothly
• Experience building agentic workflows that automate meaningful parts of infrastructure operations or governance
• Experience implementing controls for a compliance program (SOC 2, ISO 27001) without turning it into manual toil
• Cloud cost management and FinOps experience
• Hands-on experience with Azure, GCP, or OCI alongside AWS

…