Senior Cloud Engineer, Azure Government (Remote USA, ET Preferred)

APPLICATION DEADLINE: This opportunity will be taken offline based on applicant volume. We encourage you to apply today if interested. Who we are:M-Files is redefining how work gets done. Our context-first document management system offers purpose-built business use cases—spanning universal and industry-specific workflows—to enable secure collaboration, automate processes, and ensure governance.Unlike traditional systems, M-Files organizes content around the context of your business, connecting documents to related people, projects, and transactions. With our unique metadata-driven architecture, organizations can model content in line with their business processes, unify information across silos, and apply AI at scale. The result is greater productivity, reduced risk, and smarter, faster decisions for over 6,000 customers in 100+ countries. To learn more about us we encourage you to visit http://www.m-files.com/careers . BackgroundM-Files is building a FedRAMP-authorized edition of M-Files Cloud for U.S. federal agencies and the contractors that serve them, hosted in Microsoft Azure Government. The program is in its design phase with a specialist advisory partner, moves into environment build in late 2026, and targets authorization in 2027. You will join a small, senior founding team with direct ownership of a new product line. The roleYou will be the founding infrastructure engineer for the M-Files federal offering and the technical lead for standing up its Azure Government environment. Working from a reference architecture produced with our advisory partner, you will build the environment as code, make it pass a FedRAMP 20x assessment, and then operate it. You own the technical relationship with the advisory partner's engineers during build, and you set the operating standards the rest of the operations team will follow. What you will do Design and build the Azure Government environment for the federal offeringAuthor and own the infrastructure as code and the pipelines that deploy it; treat every environment change as a versioned, reviewed redeploymentImplement the security architecture: Microsoft Sentinel integration and log routing, Defender for Cloud, hardened (STIG/CIS) node and container baselines, FIPS-mode configuration across Windows and Linux computeStand up the customer-managed-key infrastructure with the product teamBuild the machine-readable evidence pipeline that FedRAMP 20x requiresWork day-to-day with the advisory partner's engineers deploying endpoint securityDefine the operating runbooks. Patching within federal timeframes, monthly authenticated scanning, backup and restore testing, break-glass access, and lead the on-call rotation as the team formsAnswer for the environment in the third-party assessment: demonstrate controls live, produce evidence on request, remediate findings Requirements What you bring 7+ years in cloud infrastructure or platform engineering, with at least 3 years hands-on in Azure at production scale; Azure Government experience strongly preferredDeep Terraform experience and a conviction that infrastructure is code, reviewed and redeployed, never hand-editedProduction Kubernetes (AKS preferred), including Windows node pools and containerized .NET workloadsWorking knowledge of Azure security services: Sentinel, Defender for Cloud, Key Vault, Azure Policy, Private Link, Entra ID and managed identitiesExperience building or operating an environment under FedRAMP, DoD CC SRG, StateRAMP/GovRAMP, or an equivalent regulated framework (PCI, ISO 27001, SOC 2); familiarity with FIPS 140 and STIG hardeningAbility to explain a technical control to a non-engineer assessor clearly and without hedging Nice to have FedRAMP 20x or OSCAL/machine-readable compliance experience; Azure Security Engineer (AZ-500) or Azure Solutions Architect certificationExperience migrating a commercial SaaS into a sovereign or government cloud Success in the first six months Environment deployed from code in Azure Government against the signed-off reference architectureSteady-state operations underway with documented runbooks and a functioning on-call rotation Compliance conditions for U.S.-based roles. These positions have access to a federal authorization boundary and are subject to: U.S. person status (U.S. citizen or lawful permanent resident) and the ability to work from the United States; no visa sponsorship for these rolesPre-employment background screening and identity verification to NIST SP 800-63A Identity Assurance Level 2 (government-issued photo ID validated with the issuing source, address confirmation)Annual acknowledgement of the federal environment Rules of Behavior and completion of role-based security training; participation in the annual incident-response exerciseWillingness to participate in an on-call rotation or U.S. business-hours coverage Benefits What We Offer: As remote enabled company our employees enjoy the flexibility to establish their own life/work balance10 paid holidays annuallyUnlimited PTOMatching 401K Plan (25% of employee's contribution up to the IRS max)Health insurance (PPO and HDHP/HSA plans offered)Dental insuranceVision insuranceLife insurance (1x employee salary)Short-term disability (employer paid)Long-term disability (employer paid)Flexible Spending Plan (medical and dependent) Does this sound exciting to you? If this sounds exciting to you, apply soon, but the latest by October 18th, 2026. Note: Applications are reviewed on a rolling basis and the position will be filled as soon as we find the right candidate. Please note that we do not accept applications via email. All applications should be submitted through LinkedIn or our Careers page.Instead of sending LinkedIn InMails or emails, we encourage you to focus on your application and tell us what attracts you to the role and why you're interested in joining M-Files. Due to the high volume of applications, we are not able to respond to all LinkedIn InMails.