Senior Cloud Platform Engineer

Job description

Ingram Content Group (ICG) is hiring a Sr. Cloud Platform Engineer . The Sr. Cloud Engineer resolves escalated service issues, coaches’ other engineers to resolutions, engineers and implements complex projects, and maintains and oversees assigned technology pillars. This position will require 4 days in the office, candidates must be in or willing to relocate to the Nashville, TN region. Want to help explore and build new ways to deliver content to the world? At Ingram, our Technology team is blazing a trail by providing content distribution services to thousands of publishers with key initiatives around business intelligence, machine learning, continuous integration and omnichannel. We support diverse people and technology that highlights innovation through SaaS platforms, metadata, cloud, and containerization. Our teams are agile, and emphasize authenticity, creativity, and transparency upon a fact-based foundation. The world is reading, and it is our goal to connect as many people as possible to the content they want in the simplest ways. If you are an IT professional who strives to deliver results through collaborative partnerships, understanding what drives business, and enjoys working in a connected culture, we can’t wait to meet you! The ideal candidate will have the following minimum qualifications: Bachelor’s or Master’s degree in Computer Science, Engineering or related field or directly related year for year work experience 5+ years in systems, infrastructure, cloud, or platform engineering, including at least 2 years working with public cloud and infrastructure automation We have a preference for: Demonstrated proficiency with Python, PowerShell, and Bash for automation and tooling Proficiency with Git, including branching strategies, pull request review, and repository and workflow management Demonstrated experience with CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab CI, including pipeline authoring and release automation Demonstrated experience with containerization and Kubernetes, including Helm, managed Kubernetes services (AKS/GKE), Traefik ingress, and container image build and registry workflows Hands-on experience operating production workloads in public cloud (Microsoft Azure and Google Cloud), including compute, networking, identity, storage, and cost management Demonstrated production experience administering software load balancers, specifically HAProxy Enterprise or equivalent, including frontend and backend configuration, ACLs, health checks, and TLS termination Working knowledge of Layer 4 and Layer 7 load balancing concepts, including session persistence, health checking, and HTTP routing Working knowledge of Linux and Windows Server administration in cloud-hosted environments, including hardening and patching Experience with metrics, logs, and distributed tracing, including OpenTelemetry instrumentation and SLO-based alerting Working knowledge of cloud security practices including least privilege, network segmentation, secrets management, hardening baselines, and vulnerability remediation The Sr. Cloud Engineer’s key responsibilities are: Troubleshoots problems related to physical and virtual infrastructure performance and resolves trouble tickets as assigned Manages, participates, or performs tasks related to specific projects to implement new technology as assigned Designs, builds, configures, integrates, deploys and tests infrastructure components, operating systems, application software and system management tools Designs, builds, maintains and monitors systems and platforms ensuring they consistently exceed defined goals for availability, capacity, efficiency, scalability, and performance Designs, builds, implements, and maintains security, redundancy, backup, and logging strategies Evaluates, maintains, and modifies established best practices for infrastructure maintenance and asset management Creates and maintains custom scripts to increase system efficiency and lower the human intervention time on manual tasks Creates and maintains documentation for system configurations, runbooks, and administration procedures in the team's designated knowledge base Produces solution designs and technical specifications, including cost estimates, resource requirements, and delivery timelines Sets technical goals and delivery milestones for assigned projects and drives them to completion, coordinating with project management and stakeholder teams Implements and utilizes configuration automation tools such as Ansible, Puppet, or Chef Partners with architecture and security teams to define and implement automation standards and reusable infrastructure patterns Implements and utilizes IaC tools such as Terraform, Bicep, and Azure Resource Manager to consistently provision resources Deploys and maintains monitoring and observability tooling (Prometheus, Grafana, OpenTelemetry, and enterprise platforms in use), and builds dashboards and alerting that reflect service-level objectives Organizes priorities, escalates problems as needed, and communicates effectively with manager, co-workers, and clients Participates in vendor and technology evaluations, including proof-of-concept work, technical due diligence, and total-cost analysis Mentors and develops other engineers through code review, pairing, runbook development, and knowledge transfer, and continuously improves team processes Builds and maintains CI/CD pipelines for infrastructure and platform changes, using GitOps workflows for deployment and drift detection Operates and upgrades managed Kubernetes platforms, including cluster lifecycle, autoscaling, ingress, and workload onboarding Owns vulnerability remediation and patching for assigned platforms against defined SLAs, coordinating with security on risk acceptance and exception handling Designs, configures, and maintains application load balancing services using HAProxy Enterprise, including frontend and backend configuration, health checks, ACL-based routing, and TLS termination Maintains high availability of load balancing tiers, including redundant and clustered configurations, failover testing, and zero-downtime configuration reloads and upgrades Onboards applications to load balancing services and implements traffic management patterns such as weighted routing, blue/green and canary releases, and rate limiting Manages TLS certificate lifecycle for load-balanced services, including issuance, renewal automation, and cipher and protocol standards Hiring Salary Range: $110,981 - $141,123. This range represents the anticipated low and high end of the salary for this position. It will be determined by factors including but not limited to: the applicant’s education, experience, knowledge, skills, and abilities, geographic location, as well as internal equity and alignment with market data. Perks/Benefits: A highly competitive compensation package with generous benefits beginning first day of employment for Medical/Prescription Drug plans, HSA, Vision, Dental and Health Care FSA. 15 vacation days & 12 sick days accrued annually and 3 personal days 401K match, Life and AD&D, Employee Assistance programs, Group Legal, & more Wellness program with access to onsite gym and basketball court for associates Encouraged continued education with our tuition reimbursement program Financial and in-kind opportunities to engage with non-profits in your community Company match program for United Way donations Volunteer opportunities and in-kind drives for non-profits throughout the year Take breaks or brainstorm in our game room with ping pong & foosball Casual Dress Code & Flexible Schedules (per team) The world is reading, and Ingram Content Group (“Ingram”) connects people with content in all forms. Providing comprehensive services for publishers, retailers, libraries and educators, Ingram makes these services seamless and accessible through technology, innovation and creativity. With an expansive global network of offices and facilities, Ingram’s services include digital and physical book distribution, print-on-demand, and digital learning. Ingram Content Group is a part of Ingram Industries Inc. and includes Ingram Book Group LLC, Ingram Publisher Services LLC, Lightning Source LLC, Ingram Library Services LLC, Tennessee Book Company LLC, Ingram Content Group UK Ltd. and Ingram Content Group Australia Pty Ltd. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, work related mental or physical disability, veteran status, sexual orientation, gender identity, or genetic information. EOE-Race/Gender/Veterans/Disabled We participate in EVerify. EEO Poster in English EEO Poster in Spanish