Cloud Enablement Engineer / Engineer II (US)

Work Location

Mount Laurel, New Jersey, États-Unis d'Amérique

Hours

40 hours per week

Pay Details

$98,160 - $159,270 USD

Line of Business

Solutions technologiques

Job Description

We are seeking a highly motivated Cloud Platform Enablement Engineer with deep expertise across Identity & Access Management, cloud networking, and infrastructure automation.

In this role, you will design and operate secure, scalable, and auditable cloud infrastructure across Azure, GCP, and on-premises environments — codifying IAM patterns, enforcing least-privilege models, automating network provisioning, and enabling self-service access for developer and application teams.

This role is central to our broader initiative to modernize secrets management, workload identity, compliance automation, and multi-cloud networking through infrastructure-as-code and GitHub Actions pipelines.

Responsibilities

• Identity & Access Management:
  • Design, deploy, and manage Azure Entra ID configurations: App Registrations, Service Principals, and Conditional Access policies
  • Define and assign RBAC roles across Azure subscriptions and management groups; manage GCP service account and organizational unit lifecycles
  • Manage HashiCorp Vault policies, secret rotation, and credential lifecycle
  • Implement authentication patterns including OAuth 2.0, OIDC, certificate-based auth, and Workload Identity Federation (GCP WIF / Azure Federated Credentials) to eliminate static credentials
• Cloud Networking:
  • Design and deploy scalable, highly available network architectures across Azure, GCP, and AWS
  • Configure and manage cloud networking components: VPCs, subnets, firewalls, VPNs, load balancers, DNS, Direct Connect, and ExpressRoute
  • Implement and maintain multi-cloud and hybrid connectivity solutions between cloud platforms and on-premises data centers
  • Monitor and optimize network performance (latency, throughput, reliability); conduct troubleshooting and root-cause analysis
  • Apply network security best practices and ensure compliance with TD policies and regulatory standards
• Automation & Engineering:
  • Build and maintain GitHub Actions workflows for self-service provisioning of infrastructure, IAM roles, and secrets using Terraform
  • Develop reusable, TD-compliant Terraform modules for GCP, Azure, and on-prem resources (VMs, networks, K8s clusters, Key Vaults, etc.)
  • Automate GitHub repository onboarding — identity pool bindings, service account associations, and OIDC pipeline authorization
  • Drive certificate-based authentication automation for on-prem VMs accessing Vault and internal services
  • Design self-service onboarding workflows for developers across EDP-GT, EDP-XL, and TD Universe environments
  • Write Python or PowerShell scripts to reduce operational toil and improve platform reliability
• Operations & Compliance:
  • Support compliance activities: audit attestations, access reviews, and RFI responses
  • Participate in capacity planning and network infrastructure scaling
  • Maintain operational documentation, runbooks, and knowledge base articles; contribute to Confluence living strategies
• Collaboration & Continuous Improvement:
  • Partner with security, IAM, and cloud architecture teams to implement compliant patterns for identity, access, and networking
  • Work with application teams to translate access and connectivity requirements into implemented solutions
  • Identify and execute opportunities to automate manual processes
  • Mentor team members and contribute to knowledge sharing across the platform

Education & Experience

• Bachelor's or Graduate degree
• Strong academic background (e.g., computer science, engineering)
• 7 + years relevant experience

Preferred Qualifications

• Hands-on experience in DevOps, SRE, Platform Engineering, or Cloud Network Engineering roles (5+ years considered for candidates with exceptional IAM or automation depth)
• Proven experience designing and managing network infrastructure across Azure, GCP, and/or AWS
• Strong Terraform and GitHub Actions background, including multi-environment deployments
• Demonstrated knowledge of cloud IAM models and network security in regulated environments
• Comfortable operating in fast-paced, Agile/Scrum teams under tight delivery timelines
• Strong analytical, problem-solving, and cross-functional communication skills