<aside> <img src="/icons/city_gray.svg" alt="/icons/city_gray.svg" width="40px" /> Citizen Codex

</aside>

<aside> <img src="/icons/row_gray.svg" alt="/icons/row_gray.svg" width="40px" /> Table of Contents

</aside>

<aside> <img src="/icons/flash_gray.svg" alt="/icons/flash_gray.svg" width="40px" /> Apply Now!

</aside>

Role Details

Title: Cloud Engineer

Company: Citizen Codex

Location: Remote

Salary: $111k - $130k

Type: Full-Time

Role Summary

You'll be joining Citizen Codex at an exciting moment as we help enterprises safely and privately adopt AI at scale. In this role, you'll own the architecture and deployment of a secure, VPC-isolated cloud environment that gives a large organization governed access to AI model capabilities across their enterprise. This isn't a maintenance role — you'll be building something new from the ground up, making foundational technical decisions that will directly shape how an entire organization works with AI.

Beyond the primary engagement, you'll also keep your hands in a variety of cloud infrastructure work across Citizen Codex's growing portfolio of mission-driven data products on AWS, Azure, and Google Cloud. You’ll get broad exposure across cloud providers and project types. For the right engineer, this is a strong opportunity to grow quickly across cloud architecture, AI infrastructure, and multi-cloud operations.

Responsibilities

Under the direction of our technical leadership, you will:

Enterprise AI Infrastructure

• Design and deploy VPC/VNet-based architectures across AWS and Azure that enable private, secure connectivity to AI model providers and APIs across an enterprise environment
• Implement private connectivity patterns (AWS PrivateLink, Azure Private Link, VPC/VNet endpoints) and network controls to ensure all AI traffic stays within defined security boundaries
• Build a model-agnostic API gateway and proxy layer that routes, logs, and governs employee access to AI capabilities — supporting multiple LLM providers without lock-in
• Establish unified identity and access controls across AWS IAM and Azure RBAC/Entra ID, including permission boundaries, secrets management, and least-privilege access policies
• Implement audit logging, monitoring, and alerting across both clouds (CloudTrail, CloudWatch, GuardDuty, Azure Monitor, Microsoft Defender for Cloud) to meet enterprise compliance requirements
• Codify all infrastructure using Infrastructure as Code (Terraform preferred, with support for CloudFormation or Bicep where appropriate) to ensure repeatable, auditable, and version-controlled deployments across environments
• Work collaboratively with the client's IT and security teams to align architecture with their existing security posture, SSO/identity providers, and network topology
• Design the infrastructure to be extensible — able to swap or add model providers, and extend across cloud environments, as the AI landscape evolves

Ongoing Cloud Support (Citizen Codex Initiatives)

• Support and maintain cloud infrastructure across a range of active projects on AWS, Azure, and Google Cloud
• Help keep environments running smoothly — patching, scaling, cost management, and general engineering hygiene
• Provide cloud guidance to product and data teams as needed across initiatives

Qualifications

• 2–4 years of hands-on cloud engineering experience, with working knowledge of AWS core services (VPC, EC2, IAM, S3, Lambda, API Gateway)
• Active cloud certification required — AWS (Solutions Architect, Developer, or SysOps), GCP, or Azure equivalent
• Solid security instincts — you build things the right way without needing to be told: least-privilege access, encryption, secrets management, proper logging
• Experience or coursework with infrastructure-as-code tools (Terraform, CDK, or CloudFormation)
• Familiarity with compliance and security concepts relevant to enterprise environments — access controls, audit logging, network isolation
• Strong communication skills and willingness to collaborate closely with both technical teammates and non-technical client stakeholders
• Curiosity and eagerness to grow — this role will stretch you across cloud providers, AI infrastructure, and enterprise security patterns

Bonus Points For

• Strong DevOps and CI/CD experience — GitHub Actions, Docker, Vercel, or similar tooling
• Familiarity with container orchestration (ECS, EKS, or Kubernetes)
• Experience with multi-account AWS strategies (AWS Organizations, Control Tower)
• Hands-on experience with Azure or Google Cloud in addition to AWS
• Exposure to AI/LLM API integrations or model-serving infrastructure
• Full-stack development experience — ability to build lightweight internal tooling or interfaces on top of cloud infrastructure
• Background in or genuine interest in civic technology and data for social impact

About Us

Citizen Codex is a data innovation studio dedicated to building products that help people and institutions make sense of information. We combine analysis, design, and technology to transform complex data into tools and narratives that drive action.

We organize our work across three areas - research, services, and ventures - that allow us to explore new ideas, collaborate with partners, and develop scalable products that create lasting impact. Whether we’re translating complicated policy into human-centered stories or building data tools for mission-driven partners, we strive to make data usable, resonant, and enable change.

What We Offer

• Health, Dental & Vision Coverage: Comprehensive medical plans with generous company support towards your premiums.
• 7 Weeks Paid Time Off: 11 federal holidays, 15 vacation days, and 8 sick days each year.
• 401(k) Retirement Plan: Save for the future, pre-tax.
• Remote-First Workplace: Work from anywhere in the U.S. with a team that values autonomy and trust.
• Mission-Driven Work: Work on meaningful projects and products that transform how information can be used for the public good.
• Collaborative Team Culture: Join a small, tight-knit team where your ideas matter and your growth is encouraged.