Senior Cloud Platform Engineer

Job DescriptionIngram Content Group (ICG)is hiring a Sr. Cloud Platform Engineer. The Sr. Cloud Engineer resolves escalated service issues, coaches’ other engineers to resolutions, engineers and implements complex projects, and maintains and oversees assigned technology pillars. This position will require 4 days in the office, candidates must be in or willing to relocate to the Nashville, TN region.Want to help explore and build new ways to deliver content to the world?At Ingram, our Technology team is blazing a trail by providing content distribution services to thousands of publishers with key initiatives around business intelligence, machine learning, continuous integration and omnichannel.  We support diverse people and technology that highlights innovation through SaaS platforms, metadata, cloud, and containerization.   Our teams are agile, and emphasize authenticity, creativity, and transparency upon a fact-based foundation. The world is reading, and it is our goal to connect as many people as possible to the content they want in the simplest ways.  If you are an IT professional who strives to deliver results through collaborative partnerships, understanding what drives business, and enjoys working in a connected culture, we can’t wait to meet you! The ideal candidate will have the following minimum qualifications:Bachelor’s or Master’s degree in Computer Science, Engineering or related field or directly related year for year work experience5+ years in systems, infrastructure, cloud, or platform engineering, including at least 2 years working with public cloud and infrastructure automationWe have a preference for:Demonstrated proficiency with Python, PowerShell, and Bash for automation and toolingProficiency with Git, including branching strategies, pull request review, and repository and workflow managementDemonstrated experience with CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab CI, including pipeline authoring and release automationDemonstrated experience with containerization and Kubernetes, including Helm, managed Kubernetes services (AKS/GKE), Traefik ingress, and container image build and registry workflowsHands-on experience operating production workloads in public cloud (Microsoft Azure and Google Cloud), including compute, networking, identity, storage, and cost managementDemonstrated production experience administering software load balancers, specifically HAProxy Enterprise or equivalent, including frontend and backend configuration, ACLs, health checks, and TLS terminationWorking knowledge of Layer 4 and Layer 7 load balancing concepts, including session persistence, health checking, and routingWorking knowledge of Linux and Windows Server administration in cloud-hosted environments, including hardening and patchingExperience with metrics, logs, and distributed tracing, including OpenTelemetry instrumentation and SLO-based alertingWorking knowledge of cloud security practices including least privilege, network segmentation, secrets management, hardening baselines, and vulnerability remediationThe Sr. Cloud Engineer’s key responsibilities are:Troubleshoots problems related to physical and virtual infrastructure performance and resolves trouble tickets as assignedManages, participates, or performs tasks related to specific projects to implement new technology as assignedDesigns, builds, configures, integrates, deploys and tests infrastructure components, operating systems, application software and system management toolsDesigns, builds, maintains and monitors systems and platforms ensuring they consistently exceed defined goals for availability, capacity, efficiency, scalability, and performanceDesigns, builds, implements, and maintains security, redundancy, backup, and logging strategiesEvaluates, maintains, and modifies established best practices for infrastructure maintenance and asset managementCreates and maintains custom scripts to increase system efficiency and lower the human intervention time on manual tasksCreates and maintains documentation for system configurations, runbooks, and administration procedures in the team's designated knowledge baseProduces solution designs and technical specifications, including cost estimates, resource requirements, and delivery timelinesSets technical goals and delivery milestones for assigned projects and drives them to completion, coordinating with project management and stakeholder teamsImplements and utilizes configuration automation tools such as Ansible, Puppet, or ChefPartners with architecture and security teams to define and implement automation standards and reusable infrastructure patternsImplements and utilizes IaC tools such as Terraform, Bicep, and Azure Resource Manager to consistently provision resourcesDeploys and maintains monitoring and observability tooling (Prometheus, Grafana, OpenTelemetry, and enterprise platforms in use), and builds dashboards and alerting that reflect service-level objectivesOrganizes priorities, escalates problems as needed, and communicates effectively with manager, co-workers, and clientsParticipates in vendor and technology evaluations, including proof-of-concept work, technical due diligence, and total-cost analysisMentors and develops other engineers through code review, pairing, runbook development, and knowledge transfer, and continuously improves team processesBuilds and maintains CI/CD pipelines for infrastructure and platform changes, using GitOps workflows for deployment and drift detectionOperates and upgrades managed Kubernetes platforms, including cluster lifecycle, autoscaling, ingress, and workload onboardingOwns vulnerability remediation and patching for assigned platforms against defined SLAs, coordinating with security on risk acceptance and exception handlingDesigns, configures, and maintains application load balancing services using HAProxy Enterprise, including frontend and backend configuration, health checks, ACL-based routing, and TLS terminationMaintains high availability of load balancing tiers, including redundant and clustered configurations, failover testing, and zero-downtime configuration reloads and upgradesOnboards applications to load balancing services and implements traffic management patterns such as weighted routing, blue/green and canary releases, and rate limitingManages TLS certificate lifecycle for load-balanced services, including issuance, renewal automation, and cipher and protocol standardsHiring Salary Range: $110,981 - $141,123. This range represents the anticipated low and high end of the salary for this position. It will be determined by factors including but not limited to: the applicant’s education, experience, knowledge, skills, and abilities, geographic location, as well as internal equity and alignment with market data.Additional InformationPerks/Benefits:A highly competitive compensation package with generous benefits beginning first day of employment for Medical/Prescription Drug plans, HSA, Vision, Dental and Health Care FSA.15 vacation days & 12 sick days accrued annually and 3 personal days401K match, Life and AD&D, Employee Assistance programs, Group Legal, & moreWellness program with access to onsite gym and basketball court for associatesEncouraged continued education with our tuition reimbursement programFinancial and in-kind opportunities to engage with non-profits in your communityCompany match program for United Way donationsVolunteer opportunities and in-kind drives for non-profits throughout the yearTake breaks or brainstorm in our game room with ping pong & foosballCasual Dress Code & Flexible Schedules (per team)The world is reading, and Ingram Content Group (“Ingram”) connects people with content in all forms. Providing comprehensive services for publishers, retailers, libraries and educators, Ingram makes these services seamless and accessible through technology, innovation and creativity. With an expansive global network of offices and facilities, Ingram’s services include digital and physical book distribution, print-on-demand, and digital learning. Ingram Content Group is a part of Ingram Industries Inc. and includes Ingram Book Group LLC, Ingram Publisher Services LLC, Lightning Source LLC, Ingram Library Services LLC, Tennessee Book Company LLC, Ingram Content Group UK Ltd. and Ingram Content Group Australia Pty Ltd. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, work related mental or physical disability, veteran status, sexual orientation, gender identity, or genetic information.EOE-Race/Gender/Veterans/DisabledWe participate in EVerify.EEO Poster in EnglishEEO Poster in SpanishSummaryType: Full-timeFunction: Information TechnologyExperience level: Mid-Senior LevelIndustry: Publishing