Principal Cloud Engineer

Acute Care Technology At ZOLL, we're passionate about improving patient outcomes and helping save lives. We provide innovative technologies that make a meaningful difference in people's lives. Our medical devices, software and related services are used worldwide to diagnose and treat patients suffering from serious cardiopulmonary and respiratory conditions. The Acute Care Technology division of ZOLL Medical Corporation develops and delivers innovative lifesaving products and software solutions to EMS, hospital, public safety, and military customers globally. Products include AEDs, trauma kits, ventilators, temperature management solutions, and more. Our dedicated employees take pride in their commitment to improving patient outcomes while delivering world-class customer service. At ZOLL, you won't just have a job. You'll have a career—and a purpose. Join our team. It's a great time to be a part of ZOLL! ZOLL Medical does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need ZOLL immigration sponsorship (e.g. H1B, TN, STEM, OPT, etc.) either now or in the future. Job Type Hybrid Job Summary As a Principal Cloud Engineer at ZOLL, you will be recognized as an expert within the cloud engineering discipline, requiring a highly specialized skill set and deep knowledge of emerging trends that influence best practices across the organization. You will contribute to the development of innovative principles and ideas, working on unusually complex problems and providing solutions that are highly creative. In this role, you will develop and implement new products, processes, standards, and operational plans that directly impact the achievement of functional results—with a primary focus on leading ZOLL's FedRAMP authorization initiative from an infrastructure, security, and compliance-as-code perspective. You will communicate regularly with leadership to align cloud strategy with organizational objectives, regulatory requirements, and FedRAMP readiness milestones. Essential Functions Strategic & Technical Leadership Apply broad expertise across cloud infrastructure, security engineering, and compliance domains to lead and contribute to company objectives in creative and effective ways Provide thought leadership on cloud architecture, platform reliability, and regulatory compliance; work on broader organization projects that require understanding of the wider business Lead the development of innovative principles, standards, and operational plans for cloud infrastructure that have measurable impact on functional results Own collaboration involving coordination among SRE, software engineering, security, compliance, and leadership groups to drive cross-functional alignment Communicate with leadership on cloud strategy, FedRAMP readiness posture, and risk decisions; convey advanced technical information and persuade diverse stakeholders Work on significant and unique issues where analysis requires evaluation of intangibles; exercise independent judgment in selecting methods, techniques, and evaluation criteria Be accountable for results that may impact the entire cloud engineering function Cloud Engineering & Platform Operations Provide automated and orchestrated management of all SaaS platforms and technical solutions, driving innovative approaches to unusually complex problems Lead AWS and GCP development, maintenance, automation, and orchestration for application pools, websites, data services, virtual networks, security, monitoring, service discovery, and other platform services; ensuring delivery on schedule and in accordance with ZOLL quality standards Lead and contribute to the definition of, and enforce patterns, best practices, and strategies for source control structure, branching, and CI/CD across the organization Architect and enhance platform services with Terraform, Ansible, Git, Artifactory, Jenkins, Packer, and related tooling Define, build, and enhance observability patterns and platforms using OTEL, Coralogix, Grafana, and other tooling Define, promote, and maintain SRE best practices across the ZOLL organization and product lines Partner with Architects and product development teams within Agile processes to build resilient services and expand ZOLL's SaaS portfolio FedRAMP Authorization & Compliance Serve as the primary cloud engineering lead for ZOLL's FedRAMP authorization initiative, owning the infrastructure and platform compliance workstream Lead the documentation and implementation of NIST 800-53 security controls as they apply to cloud infrastructure, with emphasis on the high-friction control families: AC (Access Control), AU (Audit and Accountability), CM (Configuration Management), IA (Identification and Authentication), IR (Incident Response), RA (Risk Assessment), SA (System and Services Acquisition), SC (System and Communications Protection), and CA (Assessment, Authorization, and Monitoring) Define and maintain the FedRAMP system boundary documentation, including in-scope services, environments, trust zones, interfaces, and excluded systems Own the cloud infrastructure asset inventory—applications, compute, databases, SaaS dependencies, service accounts—with data classification, ownership, and monitoring status for each asset Develop and enforce access control models aligned to FedRAMP requirements: user populations, authentication methods, approval workflows, periodic access reviews, separation of duties, and privileged access management Collaborate with compliance and security on the vulnerability management program for FedRAMP scope: scanning tools, frequencies, severity handling, remediation SLAs, exception processes, and evidence retention Implement and document the logging and audit strategy: log sources, event categories, centralization (OTEL/CloudTrail/VPC Flow Logs), retention periods, access controls, review cadence, alerting, and time synchronization—covering AU-2, AU-6,