Cloud Infrastructure Engineer

About the role

Cerebras Systems builds the world's largest AI chip, which delivers training and inference speeds over 10 times faster than GPU-based cloud services. It works with model labs, global enterprises and AI-native startups, including a multi-year partnership with OpenAI. The Cloud Infrastructure Engineer designs, builds and operates secure, scalable cloud infrastructure and identity platforms in AWS and in Cerebras' own data centers.

Key responsibilities

• Implement and manage IAM, IGA, authentication, authorization, SSO, MFA, identity lifecycle management and provisioning/deprovisioning using standards such as SAML, OAuth2, OIDC and SCIM.
• Develop automation, integrations and infrastructure-as-code solutions with Terraform and languages such as Python and Go.
• Design security controls for AI-powered systems, including audited agent workflows, and contribute to service identity, secrets management, key management, authentication and authorization.
• Partner with Security and Engineering teams to deliver secure-by-design solutions, implement Zero Trust and reduce operational friction.
• Write reliable code, take part in architecture and code reviews, support critical production systems and join the on-call and incident response of the Dev Productivity org.

Required profile

• 5+ years of experience in Cloud Infrastructure, Identity & Access Management (IAM), Identity Engineering or Security Engineering.
• Experience designing and operating identity and access controls in AWS, and building production-level services on AWS.
• Experience with container technology and deploying services on Kubernetes.
• A security-first mindset with Zero Trust, least-privilege access and compliance frameworks such as SOC2, FedRAMP or ITAR.
• Product and operational mindset, with experience supporting production services through monitoring, troubleshooting, incident response and automation.
• Excellent collaboration and communication skills, able to drive projects and influence technical decisions across teams.

Required skills

• SAML, OAuth2, OIDC, SCIM and RBAC
• Python, Go and Terraform (or similar)
• Preferred: hands-on experience with Okta, Microsoft Entra ID (Azure AD) and other IAM/IGA platforms; Azure and/or GCP experience is a bonus