Senior Cloud Engineer

Responsibilities: Infrastructure as Code & Delivery Build and maintain infrastructure as code (Terraform and/or Bicep) and reusable modules to provision Azure resources consistently across environments and sites Build CI/CD pipelines in GitHub Actions and enforce GitOps workflows where changes flow through version control, pull requests, and peer review Platform Engineering & Self-Service Build and iterate golden paths and self-service capabilities, with guardrails codified as policy to keep provisioning within security, cost, and tagging standards Document platform capabilities so internal teams can consume them without one-to-one engineering support Systems Configuration & Fleet Management Manage Linux and Windows configuration through automation—Ansible and SUSE Manager (or equivalent) for Linux; Microsoft Intune and/or Group Policy for Windows—rather than manual, host-by-host changes Maintain baseline images and standards so new hosts, including field and edge compute, are provisioned in a known, compliant state Operations, Security & Compliance Operate Azure landing zones and platform services within an Entra ID / Zero Trust model, with observability across monitoring, logging, alerting, and cost Ensure changes flow through auditable pipelines supporting SOX ITGC, and apply NERC CIP-aligned controls where platform components support in-scope systems Qualifications RequiredBachelor's degree in computer science, engineering, or related field (or equivalent experience) 8 years in infrastructure support or engineering with demonstrated progression 6+ years in cloud engineering, infrastructure automation, or platform engineering Production experience with infrastructure as code (Terraform and/or Bicep), including reusable modules and state management Hands-on experience with Git/GitHub and GitHub Actions for CI/CD or similar product Demonstrated coding ability in Python and/or PowerShell, evidenced by repositories or work samples Experience managing both Linux and Windows systems through automation (e.g., Ansible, Microsoft Intune and/or Group Policy) Preferred Platform engineering experience: internal developer platforms, golden paths, and self-service provisioning Google Cloud Platform (GCP) experience; Azure remains the primary platform SUSE Manager (or equivalent, such as Red Hat Satellite) and Microsoft Intune at scale Policy-as-code (Azure Policy, Open Policy Agent) and secrets management (Azure Key Vault, HashiCorp Vault) Regulated-sector experience and familiarity with NIST CSF, ISO 27001, or NERC CIP Certifications such as Azure Administrator Associate (AZ-104), Azure DevOps Engineer Expert (AZ-400), or HashiCorp Terraform Associate