Senior Cloud Engineer

Senior Cloud Engineer

Location: REMOTE Type: Contract Compensation: $73 - 80/hour W2 Work Model: Remote – offsite Security Clearance: Must be a US Citizen able to obtain a Public Trust clearance

The Cloud Engineer-Senior supports the contract by designing, implementing, and operating secure, scalable cloud infrastructure for enterprise applications and services. This role is central to OIT's hybrid infrastructure strategy, ensuring reliable integration of cloud and on-premises environments while maintaining high availability and performance. The engineer drives automation-first operations using infrastructure-as-code and CI/CD practices to improve consistency, speed, and operational resilience. The position enforces zero-trust and compliance requirements, supports migration and modernization initiatives, and provides technical leadership across cloud engineering activities.

Primary Responsibilities

• Design, implement, and manage cloud infrastructure solutions in Microsoft Azure and AWS, with Azure as the primary platform and AWS support focused on integration with project-team-managed workloads and potential future expansion.
• Build and maintain cloud networking, storage, compute, app services, virtualization, and containerized environments.
• Ensure scalability, resiliency, and high availability through proactive performance tuning, capacity planning, and operational optimization.
• Partner with operations teams to monitor production services, resolve incidents, and improve reliability across cloud platforms.

Security, Identity, and Compliance

• Implement and maintain cloud security configurations aligned with SEC security policies and zero-trust principles.
• Engineer and support identity and access controls using Microsoft Entra Identity, RBAC, conditional access, and least-privilege models.
• Enforce governance controls and policy compliance to support organizational and regulatory requirements, audit readiness, and risk reduction.
• Drive patching, vulnerability remediation, and secure configuration baselines across cloud-hosted infrastructure.

Automation, IaC, and CI/CD Enablement

• Develop and maintain automation using PowerShell, Bicep, ARM templates, and Terraform to provision and manage infrastructure.
• Integrate infrastructure workflows with CI/CD pipelines to standardize deployments, reduce manual effort, and improve release quality.
• Implement reusable IaC modules, scripting standards, and version-controlled operational artifacts.
• Advance automated operating models to increase consistency, security, and scalability.

Migration, Modernization, and Technical Leadership

• Lead migration of workloads from legacy/on-premises platforms to modern Azure cloud and hybrid architectures with minimal disruption.
• Optimize cloud resource utilization, cost, and service performance based on operational and mission priorities.
• Provide technical guidance and mentorship to junior engineers and cross-functional infrastructure teams.
• Create and maintain architecture documentation, SOPs, and implementation guidance to support sustainable operations.

Required Qualifications

• Must be able to work with no sponsorship in the US. Clearance: Ability to obtain and maintain SEC Public Trust (or higher if required). Education: Bachelor's degree in a relevant field.
• Minimum 8 years of experience in IT infrastructure roles, including 5+ years focused on Azure cloud engineering.
• Demonstrated experience designing and managing secure, highly available cloud environments for enterprise services.
• Proven experience leading Azure cloud migration and modernization efforts in regulated environments.
• Experience designing, configuring, and administering Azure cloud enterprise implementations using compute cloud resources such as Virtual Machines, Scale sets, Azure containers or Kubernetes, and Cloud Services.
• Strong experience with Azure tools such as Azure DevOps, Repos, Pipelines, and Boards.
• Experienced in Infrastructure as a Service (IaaS), Platform as a service (PaaS) and Software as a service (SaaS) Cloud Hosting Architecture/Design patterns to meet scalability, capacity, availability, performance, storage, cost, and application/platform requirements

Technical Skills

• Cloud networking, storage, app services, virtualization, and containerization
• DevSecOps practices, CI/CD pipeline implementation and automation practices
• Infrastructure-as-Code at production scale: PowerShell, Bicep, ARM templates, and Terraform, with reusable modules, automated validation, and drift detection.
• Cloud governance, policy enforcement, operational compliance and security in Azure: Azure Policy, RBAC, conditional access, managed identities
• Zero-trust security principles, networking design patterns, and secure cloud configuration practices
• Microsoft Entra Identity services

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert
• Experience supporting federal agency IT environments with FISMA/FedRAMP-driven security and compliance requirements.
• Hands-on experience with Kubernetes/OpenShift and cloud-native container platform operations.
• Experience integrating observability and ITSM platforms to improve incident response and service reliability.
• Experience implementing immutable infrastructure and policy-as-code controls in enterprise environments.
• Experience with cloud cost management and FinOps practices to optimize spend and performance.
• HashiCorp Terraform Associate

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.