Cloud Engineer

About the role

About Keyfactor

Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies take control of the cryptographic identities that safeguard every digital interaction. Behind the platform is a global team of people who care deeply about the work and each other. We move fast, think big, and show up for one another every day. If you're looking for work that matters and a team that brings out your best, we hope you'll trust your future with Keyfactor!

Title: Cloud Engineer

Location: Stockholm, Sweden (Hybrid)

Experience: Senior

Job Function: Cloud Operations

Employment Type: Full-Time

Industry: Computer and Network Security

About the position

The Cloud Engineer manages and improves cloud infrastructure and services within established standards and patterns. This role contributes directly to system reliability, security, and operational efficiency while owning solutions of low to moderate complexity. Cloud Engineers participate fully in operational support, incident response, and remediation activities, applying sound judgment when implementing changes within defined guardrails.

Responsibilities

Infrastructure as Code (IaC)

- Works independently with Infrastructure as Code toolsets to deploy and enhance cloud infrastructure

- Writes new or enhances existing infrastructure code of low to moderate complexity

- Seeks review for higher-risk or non-standard changes and participates in peer code reviews

Configuration

- Builds and maintains configuration code to support reliable and secure services

- Implements configuration changes independently within established patterns

- Reviews and supports configuration work performed by less senior peers when needed

Data Center Operations

- Maintains an accurate and up-to-date inventory of all physical hardware within the data center, such as HSMs, USBs, Smartcards, SSDs and Shock-Proof cases. Informs supervisor when certain materials are running low.

- Maintains detailed records of all data center operation activities, including changes to tamper evident bag numbers, incidents, and access to client materials. Follows proper procedures on strict guidelines for Root Signings, Disaster Recovery, CRLs and CSR signings. Ensures proper asset disposal procedures are followed.

- Is able to follow documented procedures on how to properly handle sophisticated hardware security modules and KVM devices. Can perform configurations of the hardware security module and KVM with supervision from more senior peers.

Task Automation

- Develops automation using scripting languages, REST APIs, Azure Automation Runbooks, Azure Function Apps, and DevOps pipelines