Senior Cloud DevOps Network Engineer (FedRAMP, Azure, Advanced Networking)

About the role

OneStream Software is a hyper-growth SaaS company focused on financial and operational data analytics for the largest companies in the world. This position focuses on the implementation of automations used to deliver, manage, and secure our cloud environments. Ideal for those staying at the forefront of technology and automating infrastructure deployments.

Responsibilities

• Lead the design, continuous monitoring, implementation, and security operations of Azure cloud solutions, ensuring they meet industry best practices and comply with FedRAMP High, IL4 requirements.
• Lead team in developing modular Infrastructure-as-Code utilizing Terraform, PowerShell, ARM, Bicep, and YAML languages.
• Lead projects of moderate complexity to completion.
• Sustain a high level of reliability for key automated systems.
• Leads teams to define, estimate, and implement requirements for new automations or services of moderate complexity needing development.
• Stay up to date with the latest Azure and FedRAMP regulatory changes and industry trends, advising teams on potential impacts and necessary adjustments.
• Update technical documentation, workflows, and knowledge base articles.
• Provide feedback in pull requests and peer coding reviews.
• Translate DISA STIGs and NIST controls into enforceable network guardrails and evidence artifacts.
• Hands on experience implementing network design and firewall configurations, as it pertains to connecting to government networks (BCAP) utilizing Azure Firewall and/or Palo Alto.
• Hands on experience implementing IPv6 routing and strict egress filtering strategies.
• Ability to translate DISA STIGs and NIST controls into enforceable network guardrails and evidence artifacts.
• Advanced understanding of Infrastructure-As-Code concepts and tooling (Terraform, CloudFormation templates, Bicep or ARM templates) on Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Deep knowledge of Configuration Management/Orchestration utilities such as Ansible, PowerShell DSC, Chef, and Puppet.
• Advanced understanding of cloud concepts including elasticity, security, and identity management.
• Well versed familiarity with Agile Development methodologies utilizing Jira or Azure DevOps Boards.
• Strong understanding of Azure Kubernetes Services (AKS) with container-based deployment skills or other platforms such as OpenShift, GKS, EKS.
• Proficient knowledge in Software Development Lifecycles.

Requirements

• BS/BA in computer science, engineering, or technology-related field (or equivalent work experience).
• 8+ years of cloud infrastructure experience.
• 2+ years of compliance programs and security control sets such as NIST SP 800-53, FedRAMP High, IL4, as applied to cloud SaaS, PaaS, and IaaS environments.
• Solid knowledge in focused areas of OneStream Software.
• Experience working for a cloud service provider (CSP), managed service provider (MSP), or SaaS provider.
• 8+ years of relevant Azure experience deploying and managing leveraging Infrastructure-as-Code (IAC) concepts.
• Microsoft Windows Server 2016-2022, IIS, Microsoft SQL Server, Azure Active Directory.
• Dealing well with ambiguous/undefined problems. Ability to self-motivate and work independently. Strong organizational and prioritization skills. Ability to find and apply effective solutions to emerging problems and challenges. Strong attention to detail. Ability to estimate your efforts. Ability to get up to speed quickly with modern technologies and services. Work well in a fast-paced environment. Ability to multitask on a variety of projects. Comfortable communicating with all levels of management.

Qualifications

• Expert knowledge of: VNets/vWAN, subnets, UDRs, routing, peering. ExpressRoute, VPN Gateway, Private Link/Endpoint. Azure Firewall, NSG/ASG, WAF, Application Gateway, Web Application Firewalls.
• Hands on experience implementing network design and firewall configurations, as it pertains to connecting to government networks (BCAP) utilizing Azure Firewall and/or Palo Alto.
• Hands on experience implementing IPv6 routing and strict egress filtering strategies.
• Ability to translate DISA STIGs and NIST controls into enforceable network guardrails and evidence artifacts.
• Advanced understanding of Infrastructure-As-Code concepts and tooling (Terraform, CloudFormation templates, Bicep or ARM templates) on Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Deep knowledge of Configuration Management/Orchestration utilities such as Ansible, PowerShell DSC, Chef, and Puppet.
• Advanced understanding of cloud concepts including elasticity, security, and identity management.
• Well versed familiarity with Agile Development methodologies utilizing Jira or Azure DevOps Boards.
• Strong understanding of Azure Kubernetes Services (AKS) with container-based deployment skills or other platforms such as OpenShift, GKS, EKS.
• Proficient knowledge in Software Development Lifecycles.

Skills

• Comfortable leveraging source control tools such as Git, BitBucket, or GitHub.
• Microsoft Azure, Amazon Web Services (AWS) or Google Cloud (GCP).
• Microsoft Windows 11, Windows Server, IIS, Microsoft SQL Server, Active Directory.

Benefits

• Vision, Medical, Life, Dental, 401K
• Total compensation is based on experience, skills, and location using objective, job-related criteria.