Cloud Engineer II (FinOps)

Certifications include ISO 27001 and SOC 2 Type II, and we hold partner status with Microsoft, Cisco and VMware. Across Texas, the company runs 14 branch offices and a central depot for hardware staging and imaging. Tickets live in ConnectWise and everyone logs time to the quarter hour.

Role overview:

Woolspring is looking for a Cloud Engineer II (FinOps) to join a small, steady team. The Cloud Operations team manages landing zones, networking and identity for every application team in the company. The company is based in Houston, the US. The team is spread across multiple countries. Contract role, full-time hours, paid in USD at the end of each month. Core hours overlap with US Central time, 9:00 AM to 1:00 PM CT. You will need a reliable internet connection and a quiet place to work.

Your responsibilities:

Apply security controls and fix findings from AWS Security Hub, Defender for Cloud or Wiz. Manage IAM roles, policies and Azure RBAC with least-privilege access. Configure backups, snapshots and disaster recovery for cloud resources. Keep architecture diagrams and runbooks current. Design VPCs and VNets, subnets, routing, VPN and Direct Connect or ExpressRoute links. Build and maintain AWS accounts or Azure subscriptions using a landing zone approach (Control Tower, Azure Landing Zones). Support application teams with load balancers, Route 53 or Azure DNS, and certificates.

What you need:

3+ years of hands-on cloud infrastructure experience. Windows and Linux server administration experience. Ability to explain cloud costs and tradeoffs to non-technical managers. Strong knowledge of AWS or Azure core services (compute, storage, networking, IAM). Familiarity with CIS benchmarks, NIST or similar security frameworks. Networking fundamentals: CIDR, routing, firewalls, DNS, VPN. Understanding of identity integration with Entra ID (Azure AD) or Okta.

Preferred:

FinOps practices and tools like CloudHealth or Vantage. GCP experience. AWS Solutions Architect Associate or Azure Administrator (AZ-104) certification.

What you get:

Annual rate review. Paid time off.

Applicants must be legally entitled to work in Canada.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Woolspring.