Cloud Platform and Infrastructure Engineer

Why This Role Matters:

You’re building the foundation for a secure, scalable, multi-tenant geospatial platform. Every inspection,map interaction, and field operation depends on the environments you deploy and the systems you protect. You will influence how we scale, secure, and evolve our core infrastructure- while ensuring our internal team has the tools and access they need. This is a pivotal technical hire. You will work closely with the CTO and help shape the future of our platform, while also lifting our overall technical maturity.

Job Description:

EcoPoint is scaling across enterprise oil & gas operators. Each client operates in a dedicated, secure AWS “spoke” environment with strict tenant isolation, federated identity, and robust access control. We are hiring a Cloud Platform & Infrastructure Engineer to lead the secure deployment, monitoring, and compliance of these environments- while also owning critical internal IT and identity systems as we scale. This is a foundational role that bridges tactical support and strategic infrastructure design.

Job Responsibilities:

Cloud Platform Engineering

● Manage hub-and-spoke AWS infrastructure across isolated operator environments.

● Define and maintain reusable Terraform modules for ECS, S3, RDS, ALB, Redis, CloudWatch, IAM, etc.

● Implement and enforce tenant-level security: IAM scoping, VPC isolation, encryption, logging.

● Own the lifecycle of PostgreSQL PostGIS environments: HA, patching, scaling, snapshots.

● Maintain ArcGIS Enterprise (Portal, Server) deployment, patching, and configuration.

● Integrate identity federation: Configure and manage SAML/OIDC SSO integrations for tenant environments.

● Support federation of ArcGIS Portal for clients as part of decoupling and platform unification.

● Design and monitor observability systems using CloudWatch, Sentry, and custom dashboards.

● Support CI/CD pipelines for backend (FastAPI) and mobile API deployments.

● Participate in incident response, RCA processes, log audits, and failover simulations.

Internal IT and Infrastructure

● Own device and identity management (e.g., MDM tools, SSO/SSO integration, RBAC policies).

● Implement automated onboarding/offboarding across SaaS systems.

● Enforce MFA, endpoint protection, and access hygiene across internal systems.

● Develop USB and removable media controls as per enterprise ESPR expectations, with exception handling and logging.

● Draft IT policy artifacts to prepare for SOC2, ISO 27001, and other compliance frameworks.

Tech Stack Overview

● Cloud: AWS (EC2, ECS, RDS, ElastiCache, ALB, S3, KMS, CloudWatch)

● IaC: Terraform (modular, remote-state, environment provisioning)

● Identity: Cognito, OIDC, SAML (SAML2/SSO integrations)

● Security: IAM, SCPs, VPC peering/isolation, encryption standards

● Monitoring: CloudWatch, Logs Insights, Sentry, custom dashboards

● Containers: Docker, ECS (Fargate), ECR

Required Professional Qualifications

● 4 years in cloud infrastructure engineering (preferably AWS)

● Expert-level Terraform: modules, bootstrapping, state management

● Hands-on PostgreSQL/PostGIS administration and tuning

● SAML/OIDC implementation for enterprise SSO (Cognito preferred)

● Demonstrated experience supporting 20 isolated AWS environments

● DevOps mindset: CI/CD, observability, automation-first

● ArcGIS Enterprise deployment and patching experience

● Security-first orientation: audits, access control, failover resilience

● Able to own internal IT operations: from device provisioning to federated identity and policy enforcement

Preferred Professional Qualifications

● AWS Control Tower, service catalog, SCPs

● SOC2, FedRAMP, ISO 27001 experience

● Terraform Cloud or Atlantis for PR-based IaC workflows

Company Description:

EcoPoint was founded in 2016 with a direct mission to advance technological adoption in the reclamation industry. This mission is furthered by a deep embrace of Geospatial Technologies and the capabilities they afford us. By leveraging the advancements in GIS, EcoPoint can provide higher quality information, faster and more accurately than has previously been possible. As an ESRI and Juniper systems partner, EcoPoint not only offers unique environmental monitoring services but aids our clients and partners in deploying GIS throughout their organization.

Benefits:

At EcoPoint we believe that our people are our greatest asset. As a rapidly growing company, we are committed to fostering an environment where you can thrive both personally and professionally. When you join our team, you’ll enjoy:

● Career Growth Opportunities – We prioritize internal promotions and invest in our team members’ success, giving you a clear path to advance your career.

● Professional Development – From mentorship programs to ongoing training, workshops, and certifications, we support your continuous learning and skill development.

● Performance-Based Bonuses – Your hard work and dedication are recognized and rewarded with performance-based incentives.

● Collaborative & Supportive Culture – Join a team that values innovation, teamwork, and open communication, where your ideas and contributions truly make an impact. 

● Work-Life Balance – We understand the importance of flexibility and well-being, offering a supportive environment that helps you succeed in all areas of life.

● Recognition & Rewards – We celebrate milestones, achievements, and contributions through employee appreciation programs and company-wide recognition.

If you're looking for a company that values your growth, rewards your contributions, and supports your journey, apply to EcoPoint today!

To Apply:

Please send a cover letter and electronic resume with a description of your experience, work history, and contact information for 3 references to jobs@ecopoint-inc.com. Additionally, please send a short intro and examples of relevant work, such as Terraform modules, AWS architectures, SSO/ArcGIS integrations, or IT infrastructure systems you’ve built.

Note: This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.