Staff Cloud Infrastructure Engineer

About the role

Cerebras Systems builds the world's largest AI chip, which delivers training and inference speeds over 10 times faster than GPU-based cloud services. As a Staff Cloud Infrastructure Engineer, you will design and run secure, scalable cloud infrastructure and identity platforms in AWS and in your own data centers, partnering with Security, Engineering and Infrastructure teams.

Key responsibilities

• Design and implement IAM, IGA, authentication, authorization, SSO, MFA, identity lifecycle management and provisioning/deprovisioning using standards such as SAML, OAuth2, OIDC and SCIM.
• Develop automation, integrations and infrastructure-as-code solutions with Terraform, Python and Go.
• Implement security controls for AI-powered systems, including audited agent workflows, and contribute to service identity, secrets management, key management and authentication.
• Partner with Security, Engineering and Infrastructure teams to drive secure-by-design solutions and Zero Trust principles.
• Lead technical direction and cross-team initiatives that improve scalability, reliability, security and developer experience.
• Write reliable code, take part in architecture and code reviews, mentor engineers and support production systems through observability and automation.
• Take part in on-call and incident response for the Developer Productivity organization.

Required profile

• 7+ years of experience in Cloud Infrastructure, Platform Engineering, Identity & Access Management, Identity Engineering or Security Engineering.
• Proven experience designing and owning complex production infrastructure or platform systems at scale.
• Experience implementing Zero Trust, least-privilege access and compliance frameworks such as SOC2, FedRAMP or ITAR.
• Ability to influence technical direction, drive cross-team initiatives and mentor engineers.

Required skills

• Strong knowledge of authentication, authorization, identity lifecycle management and federation protocols (SAML, OAuth2, OIDC, SCIM, RBAC).
• Hands-on experience with identity and access controls in AWS and production services on AWS.
• Container technologies and Kubernetes.
• Automation and coding in Python or Go, with Terraform or similar IaC tools.
• Preferred: Okta, Microsoft Entra ID (Azure AD) or modern IAM/IGA platforms; Azure and/or GCP experience is a bonus.