Production Operations Cloud Engineer About the role Keltron IoT Corp. is hiring a Production Operations Cloud Engineer to own the security, reliability, and compliance of its cloud and on-premises environment. You will run Keltron's AWS presence (with Azure as an option), keep its security tooling and monitoring running around the clock, and build the documented procedures that keep Keltron aligned with its security standards. Keltron manufactures and deploys connected life-safety devices. This role also supports the company's fleet of IoT devices and gateways. You will build on a well-automated environment, close any remaining gaps, and help shape what comes next. This role is IN-PERSON and based in Roanoke, VA, with occasional travel to the Boston area. Candidate must be able to reliably commute to Roanoke daily. Responsibilities Cloud infrastructure and DevOps Manage and secure the AWS environment (Azure optional), applying best practices for identity, network, and data protection. Build and maintain CI/CD pipelines for reliable, repeatable software deployment. Automate cloud resources with infrastructure as code, primarily Terraform. Manage SSL/TLS certificates and their renewals. Support the cloud services behind Keltron's IoT devices and gateways, including connectivity, provisioning, and fleet monitoring. Security operations Monitor endpoint and extended detection tools and respond to security alerts and incidents. Run vulnerability and security scans on software packages and infrastructure and track findings to remediation. Plan and run periodic penetration tests and maintain and improve internal testing tools. Compliance and documentation Write and maintain the company's security procedures, including secure configuration baselines and access and device management standards. Maintain the evidence trail that audits and enterprise customers request, and answer customer security questionnaires. Review and update procedures as the environment and tooling change. IT systems and networking Purchase, install, configure, and update servers, desktops, laptops, storage, phones, and operating systems (as needed). Administer Microsoft 365 and

Entra:

user accounts, onboarding and offboarding, admin consent, and app permissions (as needed). Maintain backup and recovery processes for company data, including regular restore tests. Manage VPN, firewalls, DNS, websites, email and spam filtering, and network connectivity. Qualifications Required 3+ years of hands-on AWS administration. Working experience with Terraform or a comparable infrastructure-as-code tool. Experience building or maintaining CI/CD pipelines (GitLab CI, GitHub Actions, or similar). Experience with security scanning tools such as Nessus or OWASP ZAP, and with acting on their findings. Administration of Microsoft 365, Active Directory, Entra, Windows systems, and Linux servers. Working knowledge of firewalls, VPN, DNS, email and spam filtering, and general internet protocols. Preferred Experience implementing or documenting CIS Controls (IG1) or NIST frameworks. Experience with EDR/XDR platforms. Experience planning or running penetration tests. Scripting in Python, Bash, or PowerShell; comfort using AI coding tools. Familiarity with IoT devices and gateways. Azure, VMware, or other virtualization experience. AWS or security certifications (e.g., AWS Solutions Architect or SysOps, Security+). Bachelor's degree in computer science or a related field, or equivalent experience.

Benefits:

Health, dental, vision, FSA, HSA, Life, STD, LTD insurance, 401K with match

Pay:

$110,000.00 - $120,000.00 per year

Benefits:

401(k) 401(k) matching Dental insurance Flexible spending account Health insurance Health savings account Life insurance Paid time off Vision insurance Application Question(s): Years of Experience with CI/CD pipelines Years of experience with security scanning tools? Years of experience working with security operations and creating security procedures? Years of experience managing IT and networking systems

Experience:

AWS administration: 3 years (Required)

Terraform:

1 year (Required) Ability to

Commute:

Roanoke, VA 24019 (Required)

Work Location:

In person