Note: The job is a remote job and is open to candidates in USA. ExploreGod harnesses digital technology to spread the Gospel globally and foster spiritual growth through data-driven digital channels. The Cloud Platform Engineer will own, automate, optimize, and secure the AWS cloud infrastructure supporting the organization’s digital ministry, while enabling reliable deployments, strong observability, and effective developer workflows.
Responsibilities
- Architecture & Maintenance: Provision, scale, and optimize high-availability AWS cloud infrastructure supporting production and non-production environments
- Infrastructure as Code (IaC): Maintain, modularize, and expand our infrastructure definitions using AWS CDK (TypeScript), eliminating manual configuration drift. Familiarity with Terraform or CloudFormation transfers well here
- Monitoring & Observability: Design and maintain robust logging, metrics, and alerting frameworks (e.g., AWS CloudWatch) to proactively spot performance bottlenecks and system anomalies
- Cost & Performance Optimization: Continually audit resource utilization to optimize cloud spend while ensuring top-tier application performance and system resilience
- CI/CD Pipeline Engineering: Design, build, and maintain automated deployment pipelines in CircleCI — integrating build, test (Vitest, Cypress), linting (Biome), and security scanning (Semgrep) — to ensure fast, predictable, and repeatable software releases
- Developer Enablement: Serve as an internal infrastructure partner to the software engineering team, removing friction from their workflows and enabling smooth, self-service application deployments. Our engineers work in a modern TypeScript/Node.js stack, including the PATH platform: an Angular frontend with a Prisma/Node.js backend on PostgreSQL/RDS
- Containerization & Orchestration: Manage and scale containerized applications using Docker and AWS container services (e.g., ECS)
- Disaster Recovery: Develop, document, and regularly test disaster recovery and automated backup strategies to guarantee minimal downtime
- Proactive Perimeter Defense: Implement and enforce network-level security controls — secure VPC design, security groups, and encryption for data at rest and in transit — applying defense in depth throughout
- Identity & Access Management: Enforce strict principle-of-least-privilege access across all AWS environments via IAM roles, policies, and SSO configurations, including scoped, per-source roles that isolate blast radius for sensitive data
- Automated Security Gates: Integrate security checks directly into the CI/CD pipeline, including static application security testing (SAST), and dependency vulnerability scanning
- Secrets Management: Ensure applications and environments securely manage API keys, passwords, and tokens using AWS Systems Manager (SSM) Parameter Store and AWS Secrets Manager
- Compliance & Auditing: Collaborate with internal teams to track compliance metrics, review system logs, and implement technical controls aligned with industry security standards
Skills
- * Education: Bachelor's degree in Computer Science, Engineering, or a related technical field preferred, or equivalent hands-on experience
- * Experience: 5+ years of professional experience across disciplines including infrastructure, platform, operations, and security, including substantial hands-on time running production cloud environments. This is an end-to-end ownership role; we're looking for someone with the operational judgment that comes from having run — and fixed — real systems under load
- * Cloud Depth (AWS preferred): Our stack is all-in on AWS, so deep production AWS experience is ideal
- * Cloud Depth (AWS preferred): That said, we care more about depth than logo: equivalent mastery of GCP or Azure counts toward seniority, provided you can demonstrate the ability to ramp quickly on a new cloud
- * Infrastructure as Code: Proven experience managing cloud systems deterministically via AWS CDK, Terraform, or CloudFormation
- * Automation Spirit: Strong scripting capability in at least one modern language (e.g., TypeScript, Python, or Go) for system automation, plus familiarity with bash
- * CI/CD Literacy: Deep understanding of modern software deployment strategies (Blue/Green, Canary) and pipeline configuration
- * Security Mindset: Practical, first-principles understanding of cloud-native security — vulnerability management, least-privilege access, network-layer protection — and a habit of building it in rather than bolting it on
- * How You Think: More than any single tool, we're looking for someone who reasons from first principles, picks up unfamiliar systems fast, and takes ownership without waiting to be told
- * Team-Oriented Builder: A strong team player who partners seamlessly with software engineers, ministry stakeholders, and leadership. Views infrastructure and security as an enabler for the development team and adopts a collaborative approach to DevOps
- * Cross-Departmental Synergy: Ability to build strong relationships across the organization and work collectively toward the shared mission
- * Continuous Learner: Possesses a natural curiosity and eagerness to stay ahead of the curve on new cloud technologies, security threats, and DevOps best practices
- * This position is fully remote
- * Only U.S.-based applicants will be considered
- * Applicants must be authorized to work in the U.S
- * Alignment with our Statement of Faith is required
- * Education: Bachelor's degree in Computer Science, Engineering, or a related technical field preferred
- * CI/CD Literacy: CircleCI experience a plus
Benefits
- Fully remote work arrangement
Company Overview