DevOps Engineer, Cloud

About The Company

BAE Systems is a leading defense, aerospace, and security company committed to delivering innovative solutions that enhance national security and defense capabilities worldwide. As a subsidiary of BAE Systems plc, based in the United Kingdom, BAE Systems Inc. operates across various sectors including air, land, naval forces, electronics, and information technology. The company prides itself on fostering a culture of trust, camaraderie, and flexibility, empowering its employees to drive technological advancements and make a meaningful impact on global security. BAE Systems is dedicated to supporting its workforce through comprehensive benefits, professional development opportunities, and a collaborative environment that prioritizes growth and innovation.

About The Role

We are seeking a highly motivated and experienced Cloud Engineer to join our Windows Server Operations team. This critical position serves as a bridge between traditional Windows Server management and modern cloud-native delivery methods. The successful candidate will be responsible for maintaining the stability, security, and performance of our Windows infrastructure while leading efforts in cloud migration, automation, and secure lifecycle management. The role requires expertise in Windows Server administration, cloud platforms, and automation tools to optimize hybrid cloud environments. The Cloud Engineer will also collaborate with cybersecurity and development teams to resolve complex technical issues, implement best practices, and stay current with emerging technologies to ensure our infrastructure remains robust and compliant with industry standards.

Qualifications

• 12+ years of experience in Windows Server Operations and Cloud Automation with a High School Diploma, or 10+ years with an Associate's Degree, or 8+ years with a Bachelor's Degree.
• Proven experience designing and maintaining Azure/cloud DevOps pipelines, with familiarity across Azure services such as App Services, Key Vault, Storage, Networking, and Azure Monitor.
• Expertise in scripting languages including PowerShell and REST APIs, along with CI/CD principles and DevSecOps practices.
• Strong knowledge of Infrastructure-as-Code (IaC) tools such as ARM, Bicep, and Terraform.
• In-depth understanding of Windows Server versions (2016, 2019, 2022, 2025), security policies, and Group Policy Objects (GPOs).
• Experience with automation of server provisioning, configuration, and lifecycle management.
• Ability to analyze complex issues, perform root cause analysis, and manage high-priority incidents effectively.
• Strong problem-solving skills and the ability to work independently while managing multiple priorities.
• Relevant certifications such as Azure Solution Architect Expert, Azure Administrator Associate, DevOps Engineer, AWS Solution Architect Professional, or AWS CloudOps Engineer are preferred.
• Experience with security and compliance frameworks such as CMMC, NIST 800-171, and NIST 800-53 is a plus.
• Working knowledge of network protocols (TCP/IP, DHCP, DNS), firewalls, VLAN segmentation, and endpoint management tools like Tanium.

Responsibilities

• Lead the migration of legacy Windows systems and workloads to modern cloud or virtualized platforms, ensuring data integrity and seamless transition.
• Design, develop, and maintain Azure DevOps CI/CD pipelines (YAML and classic) to automate server provisioning, configuration, and lifecycle management across development, testing, and production environments.
• Manage and optimize Azure infrastructure deployments using Infrastructure-as-Code tools such as ARM, Bicep, or Terraform.
• Develop, debug, and maintain advanced PowerShell scripts to automate repetitive administrative tasks and integrate heterogeneous tools.
• Ensure security and compliance by adhering to standards such as CMMC controls, DoD STIGs, CIS Benchmarks, and IAVM requirements.
• Design and support Windows Server environments and containerized workloads (AKS, Docker, Tanzu) within cloud platforms.
• Manage endpoint visibility, vulnerability management, and automated patching cycles using Tanium to maintain high operational compliance.
• Collaborate with cybersecurity and development teams to troubleshoot complex technical issues and provide guidance to junior engineers.
• Stay updated on emerging technologies, industry trends, and best practices through continuous learning and training initiatives.

Benefits

• Competitive full-time salary range of $120,874 to $205,486, commensurate with experience and qualifications.
• Comprehensive health, dental, and vision insurance plans.
• Health savings accounts and flexible spending options.
• 401(k) retirement savings plan with company matching.
• Disability, life, and accident insurance coverage.
• Paid time off, holidays, and various leave options including parental, military, and bereavement leave.
• Employee assistance programs, legal plans, and discounts on home, auto, and pet insurance.
• Opportunities for professional development, training, and career advancement.