Job description

Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU. If you'd like to build the world's best AI cloud, join us. *Note: This position requires presence in our San Francisco/San Jose/Bellevue office location 4 days per week; Lambda’s designated work from home day is currently Tuesday. Cloud Foundations manages the account, access, and network foundation that Lambda's cloud infrastructure runs on, implementing governance and access controls in line with company policies. In practice that means AWS accounts and IAM, the VPC and transit network structure, DNS, and the Terraform execution platform that every change flows through. This is a new team, and this role helps define it. Working closely with Security, GRC, IT, and the engineering teams that consume the foundation, this position turns policy into working controls and paved paths, so that hundreds of engineers can safely self-serve instead of filing requests. What You’ll Do - Own and evolve the IaC execution platform (Terraform, Atlantis): how infrastructure changes are proposed, reviewed, and applied across the company - Design and operate Lambda's cloud account, access, and IAM structure: organizational hierarchy, provisioning, and permission models - Own the cloud network foundation: VPCs, Transit Gateway, and DNS, including the patterns other teams build on - Drive AWS cloud governance: tagging standards, compliance guardrails, and cost visibility and accountability - Implement least-privilege access and compliance automation in line with company requirements and policies, replacing manual access and provisioning work with self-service - Help shape how this new team operates: its scope, priorities, and service boundaries - Participate in an on-call rotation and keep the systems you own well-documented, reliable, and observable Who You Are - 6+ years of experience in cloud infrastructure, cloud platform, or cloud security engineering, or a closely related discipline - Deep experience managing AWS at scale: multi-account organizations, IAM and permission boundaries, SCPs, and resource organization - Strong foundation in infrastructure-as-code (Terraform) and the tooling around it: modules, state management, and automated plan/apply workflows - Solid cloud networking fundamentals: VPC design, transit and hybrid connectivity, DNS, and edge/CDN configuration - Comfortable writing the automation and tooling that runs the foundation (Go and/or Python), and treating it as a product: real users, real quality standards, and things that actually get adopted - Use AI tools as a natural part of how you work, and hold their output to the same bar as your own: you review it, verify it, and own what ships - Build for the many, not for one team or one use case - Comfortable with ambiguity and clarifying ownership - Distill the right problem out of the noise: ask the why behind the why - Own what you build past the point it ships: monitor it, measure whether it actually helped, and act on what you learn - Sweat the details and aren't satisfied until things run smoothly Nice to Have - Experience building agentic workflows that automate meaningful parts of infrastructure operations or governance - Experience implementing controls for a compliance program (SOC 2, ISO 27001) without turning it into manual toil - Cloud cost management and FinOps experience - Hands-on experience with Azure, GCP, or OCI alongside AWS Salary Range Information The annual salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description. About Lambda - Founded in 2012, with 500+ employees, and growing fast - Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove - We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG - Our values are publicly available: lambda.ai - We offer generous cash & equity compensation - Health, dental, and vision coverage for you and your dependents - Wellness and commuter stipends for select roles - 401k Plan with 2% company match (USA employees) - Flexible paid time off plan that we all actually use Equal Opportunity Employer Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.

Requirements

Must-haves

If you'd like to build the world's best AI cloud, join us.
Note: This position requires presence in our San Francisco/San Jose/Bellevue office location 4 days per week; Lambda’s designated work from home day is currently Tuesday.
What You’ll Do
Own and evolve the IaC execution platform (Terraform, Atlantis): how infrastructure changes are proposed, reviewed, and applied across the company
Design and operate Lambda's cloud account, access, and IAM structure: organizational hierarchy, provisioning, and permission models
Own the cloud network foundation: VPCs, Transit Gateway, and DNS, including the patterns other teams build on
Drive AWS cloud governance: tagging standards, compliance guardrails, and cost visibility and accountability
Implement least-privilege access and compliance automation in line with company requirements and policies, replacing manual access and provisioning work with self-service
Help shape how this new team operates: its scope, priorities, and service boundaries
Participate in an on-call rotation and keep the systems you own well-documented, reliable, and observable
6+ years of experience in cloud infrastructure, cloud platform, or cloud security engineering, or a closely related discipline
Deep experience managing AWS at scale: multi-account organizations, IAM and permission boundaries, SCPs, and resource organization
Strong foundation in infrastructure-as-code (Terraform) and the tooling around it: modules, state management, and automated plan/apply workflows
Solid cloud networking fundamentals: VPC design, transit and hybrid connectivity, DNS, and edge/CDN configuration
Comfortable writing the automation and tooling that runs the foundation (Go and/or Python), and treating it as a product: real users, real quality standards, and things that actually get adopted
Use AI tools as a natural part of how you work, and hold their output to the same bar as your own: you review it, verify it, and own what ships
Build for the many, not for one team or one use case
Comfortable with ambiguity and clarifying ownership
Distill the right problem out of the noise: ask the why behind the why
Own what you build past the point it ships: monitor it, measure whether it actually helped, and act on what you learn

Nice-to-haves

Experience building agentic workflows that automate meaningful parts of infrastructure operations or governance
Experience implementing controls for a compliance program (SOC 2, ISO 27001) without turning it into manual toil
Cloud cost management and FinOps experience
Hands-on experience with Azure, GCP, or OCI alongside AWS

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsgopythonazuregcpmachine learning

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off

Wellness