We are seeking a Staff Cloud Infrastructure Engineer to play a key role in designing, optimizing, and securing the underlying cloud infrastructure that powers our organization's cloud environments. As we continue to transform, consolidate, and evolve our cloud environments, this role will be instrumental in architecting scalable, secure, automated, and resilient infrastructure, ensuring seamless workload migration, and integrating new cloud environments into our ecosystem.

With a focus on core cloud infrastructure, including networking, identity and access management, security, storage, compute, and cross-cloud integrations, you will collaborate closely with peers in security, development, and other areas of the platform engineering team to ensure our cloud environment adheres to best practices, governance frameworks, and automation-first principles.

What You Will Do:

• Design, implement, and optimize cloud-native infrastructure using best practices for security, scalability, and high availability
• Integrate newly acquired cloud environments into the organization's cloud footprint, ensuring security and consistency
• Develop and implement hybrid-cloud and cross-cloud connectivity strategies to ensure interoperability
• Architect, optimize, and maintain secure network infrastructure in Azure, AWS, & GCP - including DNS, routing, and low-latency cross-cloud communication
• Collaborate with security teams to enforce Zero Trust networking, IAM, and data encryption standards, as well as general security framework adherence
• Maintain and expand a modular network security edge that provides for integration testing among development teams while remaining flexible enough to unify additional environments as M&A requires
• Automate cloud infrastructure provisioning using Terraform and Ansible, writing IaC that supports Simple, Secure, and Scalable deployments
• Implement policy-based automation (AWS SCPs, Azure Policy) to maintain governance across cloud environments
• Support observability teams with infrastructure monitoring and alerting using CloudWatch, Datadog, and Log Analytics
• Drive transformation and standardization of our foundational infrastructure services as the environment evolves and the business grows, including optimizing processes, developing policies, and enabling secure, self-service infrastructure for our engineering partners

What You Need to Succeed:

• 10+ years of experience in cloud infrastructure engineering, platform engineering, or infrastructure architecture
• Strong expertise in cloud infrastructure, including networking, security, compute, storage, and IAM
• Experience migrating workloads from on-prem to cloud and integrating new cloud environments into existing architectures
• Deep understanding of multi-cloud networking (AWS VPCs, Azure VNets, Transit Gateway, ExpressRoute, PrivateLink, DNS, hybrid connectivity)
• Hands-on experience with Infrastructure as Code and automation cloud infrastructure (Terraform and Ansible)
• Strong security knowledge, including IAM, encryption, network security, PKI, certificate management, and compliance frameworks (SOC2, HITRUST, NIST, FedRAMP)
• Experience managing multi-account cloud governance and security policies (AWS Organizations, Azure Policy, SCPs)
• Excellent problem-solving skills, with the drive to bring clarity to vague situations and a desire to constantly expand your skills
• Strong communication skills, including the ability to describe complex problems to non-technical staff, paired with the curiosity, adaptability, and flexibility needed to navigate a growing enterprise
• Experience leveraging AI agents to accelerate daily workload
• Competency with the following technologies:

• Compute: Azure VMs, EC2, VMware vSphere
• Network security: Azure (VNets, NSG, AGW); AWS (VPC, TGW, Peering, SG, ALB, NLB); NextGen FW, VPN
• Storage: Azure Files & Blob, Amazon S3, AWS FSxN
• Automation: Ansible Automation Platform, Terraform, GitHub
• Core: Windows & Linux, DNS / IPAM, Active Directory
• Observability: Datadog, CloudWatch, Azure Log Analytics, Aria
• IAM: Azure Roles, AWS IAM

What Helps You Stand Out:

• Group Policy, PowerShell, CIFS & NFS storage protocol, Palo Alto, F5
• Deep knowledge of cloud services, containerization, and/or Kubernetes
• Experience driving environment consolidation and integration, bringing order to disparate hybrid and multi-cloud architectures as the business grows
• Experience driving technical initiatives end-to-end
• Knowledge of multi-region architecture and disaster recovery strategies
• Background in cloud cost optimization and FinOps methodologies
• Experience with cloud-native identity management (AWS IAM Identity Center, Entra ID, RBAC)

At Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services.

The range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job.

The estimated total cash compensation range for this role is:

$190,000-$235,000 USD

To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion.

This job is not eligible for employment sponsorship.