Senior Cloud Engineer

Responsibilities

• Build and maintain infrastructure as code (Terraform and/or Bicep) and reusable modules to provision Azure resources consistently across environments and sites
• Build CI/CD pipelines in GitHub Actions and enforce GitOps workflows where changes flow through version control, pull requests, and peer review
• Build and iterate golden paths and self-service capabilities, with guardrails codified as policy to keep provisioning within security, cost, and tagging standards
• Document platform capabilities so internal teams can consume them without one-to-one engineering support
• Manage Azure landing zones and platform services within an Entra ID / Zero Trust model, with observability across monitoring, logging, alerting, and cost
• Ensure changes flow through auditable pipelines supporting SOX ITGC, and apply NERC CIP-aligned controls where platform components support in-scope systems

Qualifications

• Required: Bachelor’s degree in computer science, engineering, or related field (or equivalent experience)
• Required: 8 years in infrastructure support or engineering with demonstrated progression
• Required: 6+ years in cloud engineering, infrastructure automation, or platform engineering
• Required: Production experience with infrastructure as code (Terraform and/or Bicep), including reusable modules and state management
• Required: Hands-on experience with Git/GitHub and GitHub Actions for CI/CD or similar product
• Required: Demonstrated coding ability in Python and/or PowerShell, evidenced by repositories or work samples
• Required: Experience managing both Linux and Windows systems through automation (e.g., Ansible, Microsoft Intune and/or Group Policy)

Preferred

• Platform engineering experience: internal developer platforms, golden paths, and self-service provisioning
• Google Cloud Platform (GCP) experience; Azure remains the primary platform
• SUSE Manager (or equivalent, such as Red Hat Satellite) and Microsoft Intune at scale
• Policy-as-code (Azure Policy, Open Policy Agent) and secrets management (Azure Key Vault, HashiCorp Vault)
• Regulated-sector experience and familiarity with NIST CSF, ISO 27001, or NERC CIP
• Certifications such as Azure Administrator Associate (AZ-104), Azure DevOps Engineer Expert (AZ-400), or HashiCorp Terraform Associate