Senior Cloud Engineer

About this role

<h2><strong>About impact.com</strong></h2> <p><a href="http://impact.com/">impact.com</a> is the world’s leading commerce partnership marketing platform, transforming the way businesses grow by enabling them to discover, manage, and scale partnerships across the entire customer journey. From affiliates and influencers to content publishers, brand ambassadors, and customer advocates, <a href="http://impact.com/">impact.com</a> empowers brands to drive trusted, performance-based growth through authentic relationships. Its award-winning products—<strong>Performance</strong> (affiliate), <strong>Creator</strong> (influencer), and <strong>Advocate</strong> (customer referral)—unify every type of partner into one integrated platform. As consumers increasingly rely on recommendations from people and communities they trust, <a href="http://impact.com/">impact.com</a> helps brands show up where it matters most. Today, over 5,000 global brands, including Walmart, Uber, Shopify, Lenovo, L’Oréal, and Fanatics, rely on <a href="http://impact.com/">impact.com</a> to power more than 225,000 partnerships that deliver measurable business results.</p> <h2 class="p1"><strong>Position Overview</strong></h2> <p class="p2">As impact.com scales, we require a Senior Cloud Engineer to serve as a technical specialist&nbsp;for our infrastructure substrate. You will be part of a specialised squad (IaC &amp; Provisioning,</p> <p class="p2">Observability, SRE, SecOps, or FinOps) focused on ensuring that production environments are&nbsp;stable, observable, secure, and cost-effective.&nbsp;In this role, you treat the infrastructure layer as a capability provider to the rest of the&nbsp;engineering organisation. You are responsible for executing the technical roadmap, covering&nbsp;everything from IaC evolution and GCP/AWS Kubernetes and compute management to&nbsp;vulnerability remediation and observability standards.<br><br><strong>Key Responsibilities</strong></p> <p class="p3"><strong>Infrastructure &amp; Compute Engineering</strong></p> <ul> <li class="p2">Author, maintain, and version high-quality IaC modules (Terraform) for GCP and AWS&nbsp;services, ensuring they are consumable by platform engineering.</li> <li class="p2">Deploy and maintain foundational networking topology, VPCs, DNS, and IAM primitives.</li> <li class="p2">Manage the lifecycle of GKE/EKS clusters and compute instances, including the maintenance of secure base images and container standards.</li> <li class="p2">Drive drift detection and remediation, ensuring automated scans run daily with&nbsp;remediation completed within 24 hours.</li> </ul> <p class="p3"><strong>Reliability &amp; Observability</strong></p> <ul> <li class="p2">Maintain observability backends (metrics pipelines, log storage, and alerting) to ensure&nbsp;infrastructure-layer monitoring standards are met.</li> <li class="p2">Ensure log pipeline uptime of 99.9% and maintain an alert accuracy rate of < 5% false&nbsp;positives for P1/P2 alerts.</li> <li class="p2">Participate in stress testing and capacity planning to ensure infrastructure can scale&nbsp;safely.</li> <li class="p2">Reduce toil through automation, contributing to at least one major toil reduction initiative&nbsp;per quarter.</li> </ul> <p class="p3"><strong>Incident Response &amp; SecOps</strong></p> <ul> <li class="p2">Participate in the infrastructure on-call rotation, acknowledging P1 incidents within 5&nbsp;minutes and aiming for an MTTR of < 30 minutes.</li> <li class="p2">Execute vulnerability remediation and security patching on advisories from the SOC:&nbsp;Critical (48 hours) and High (7 days).</li> <li class="p2">Ensure patch compliance for > 95% of systems and conduct quarterly access reviews.</li> <li class="p2">Draft and publish blameless post-mortems within 5 working days of resolving&nbsp;infrastructure incidents.</li> </ul> <p class="p3"><strong>Cloud Economics (FinOps)</strong></p> <ul> <li class="p2">Support cloud spend governance by identifying rightsizing opportunities and reserved&nbsp;instance strategies.</li> <li class="p2">Flag regional spend anomalies (> 10% deviation) within 24 hours of detection.</li> </ul> <p class="p1">&nbsp;</p> <p class="p1"><strong>Required Experience &amp; Skills</strong></p> <ul> <li class="p2">5+ years of experience in cloud infrastructure, SRE, or platform operations.</li> <li class="p2">Hands-on experience operating infrastructure at scale in GCP (preferred) and AWS.</li> <li class="p2">Proficiency with Terraform, Kubernetes (GKE), and observability stacks like Prometheus, Grafana, or Open Telemetry.</li> <li class="p2">Experience with security patching, access controls, and Google SREprinciples (error budgets, SLOs).</li> </ul> <p class="p1"><strong>Key Performance Indicators (KPIs)</strong></p> <ul> <li class="p2">Maintain 99.99% availability for cloud infrastructure per year.</li> <li class="p2">Target > 90% IaC module coverage for all provisioned infrastructure.</li> <li class="p2">Acknowledge SOC advisories within 4 hours and triage within 1 working day.</li> <li class="p2">Delivery of new standard environments within 2 working days.</li> </ul> <p class="p1"><strong>Role Boundaries</strong></p> <p class="p2">To maintain focus, this role does not own:</p> <ul> <li class="p2">Application-level business logic or shared libraries.</li> <li class="p2">Developer-facing observability standards or CI/CD deployment tooling.</li> <li class="p2">Security policy and risk management frameworks (owned by the Security department).</li> </ul> <h2><strong>Benefits:</strong></h2> <ul> <li><strong>Hybrid, Casual work environment</strong></li> <li><strong>Unlimited PTO policy</strong></li> <ul> <li>Take the time off that you need. We are truly committed to a positive work-life balance, recognising that it is important to be happy and fulfilled in both</li> </ul> <li><strong>Training &amp; Development</strong></li> <ul> <li>Learning the advanced partnership automation products</li