Keyfactor

Cloud Engineer

In short

Cloud Engineer role managing and improving Azure-based cloud infrastructure for Keyfactor, a cryptographic trust infrastructure company for AI and machines, based in Stockholm (hybrid). The role covers Infrastructure as Code, configuration management, data center operations with HSMs, task automation, networking, monitoring, patch management, and PKI work. Requires 2-5 years of relevant experience, hands-on Microsoft Azure skills, PowerShell scripting, strong Windows/Active Directory administration, and up to 15% travel.

About the Role
Title: Cloud Engineer
Location: Stockholm, Sweden (Hybrid)
Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies take control of the cryptographic identities that safeguard every digital interaction.
The Cloud Engineer manages and improves cloud infrastructure and services within established standards and patterns. This role contributes directly to system reliability, security, and operational efficiency while owning solutions of low to moderate complexity. Cloud Engineers participate fully in operational support, incident response, and remediation activities, applying sound judgment when implementing changes within defined guardrails.
Responsibilities
Infrastructure as Code (IaC)
•Works independently with Infrastructure as Code toolsets to deploy and enhance cloud infrastructure
•Writes new or enhances existing infrastructure code of low to moderate complexity
•Seeks review for higher-risk or non-standard changes and participates in peer code reviews
Configuration
•Builds and maintains configuration code to support reliable and secure services
•Implements configuration changes independently within established patterns
•Reviews and supports configuration work performed by less senior peers when needed
Data Center Operations
•Maintains an accurate and up-to-date inventory of all physical hardware within the data center, such as HSMs, USBs, Smartcards, SSDs and Shock-Proof cases
•Informs supervisor when certain materials are running low
•Maintains detailed records of all data center operation activities, including changes to tamper evident bag numbers, incidents, and access to client materials
•Follows proper procedures on strict guidelines for Root Signings, Disaster Recovery, CRLs and CSR signings
•Ensures proper asset disposal procedures are followed
•Able to follow documented procedures on how to properly handle sophisticated hardware security modules and KVM devices
•Can perform configurations of the hardware security module and KVM with supervision from more senior peers
Task Automation
•Develops automation using scripting languages, REST APIs, Azure Automation Runbooks, Azure Function Apps, and DevOps pipelines
•Delivers automation solutions of low to moderate complexity that improve operational consistency
•Participates in automation reviews and knowledge sharing
Networking
•Applies cloud networking concepts to maintain a strong security posture
•Implements approved networking changes aligned with established protocols and standards
•Seeks guidance for complex or non-standard networking scenarios
Monitoring & Alerting
•Works with Azure Monitor to administer and enhance monitoring and alerting configurations
•Ensures systems are monitored appropriately and alerts are actionable
•Supports improvements to observability and incident detection
Patch Management
•Coordinates and executes patch management activities
•Troubleshoots routine patching issues independently and escalates complex cases as needed
PKI Knowledge
•Applies working knowledge of PKI concepts in support of customer and hosted environments
•Performs PKI-related tasks with minimal supervision
•Reviews routine PKI work completed by less senior engineers
•Participates in cross-functional certificate reviews
Product Knowledge
•Works with Keyfactor's hosted products and core functionality
•Deploys and configures products to a baseline or moderate complexity level
•Performs low to moderate complexity troubleshooting
•Supports operational readiness and stability of hosted offerings
Requirements
•Job Function: Cloud Operations
•Employment Type: Full-Time
•Industry: Computer and Network Security
•High School Diploma or equivalent experience
•2 to 5 years of related work experience and general knowledge within their functional area
•Hands-on experience with Microsoft Azure, including native services and tooling
•Experience with Infrastructure as Code (IaC) and configuration management tools
•Proficiency in PowerShell scripting (medium to high complexity)
•Strong Windows systems administration experience, including Windows Roles & Features and Active Directory
•Strong problem-solving skills, with the ability to troubleshoot moderately to highly complex issues
•Effective written and verbal communication skills with a professional demeanor
•Strong organizational, time-management, and attention-to-detail skills
•Proven ability to collaborate within and across teams
•Self-motivated with the ability to manage projects to completion with some oversight
•Able to thrive in a fast-paced, deadline driven environment
•Up to 15% travel time required
Conditions
Salary will be commensurate with experience. We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas.
Benefits and initiatives include:
•Second Fridays (a company-wide day off on the second Friday of every month minus November and December due to the Holiday schedule) — subject to change
•Comprehensive benefit coverage globally
•Paid Parental Leave available to new parents, with structure varying by region/government requirements; in regions without government-paid leave (e.g. U.S.), generous paid parental leave plus adoption and fertility support
•Competitive time off globally
•Dedicated employee-focused ambassadors via Key Contributors & Culture Committees
•DIVERSE Commitment, a call to action for a more inclusive and diverse future in business, society, and technology
•The Keyfactor Alliance Program to support DEIB efforts
•Wellbeing resources, wellness allowance, mindfulness app free membership, Wellness Wednesdays
•Global Volunteer Day, company non-profit matching, and 3 volunteer days off
•Monthly Talent development and Cross Functional meetings to support professional development
•Regular All Hands meetings followed by group gatherings

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot