Cloud Engineer

okgov; Oklahoma; Presencial; USD 79.000 - 96.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Vacation 15 days

Sick leave 15 days

11 holidays

Insurance premium support

Descripción de la vacante

OMES is seeking a Cloud Engineer to design, deploy, and manage Azure cloud infrastructure in Oklahoma City. You will handle Azure compute, networking, storage, and monitoring, while configuring Entra ID and Azure AD B2C for secure identity and access management.

You will implement IaC using Terraform, Bicep, and Azure DevOps pipelines, monitor performance and costs, and collaborate with security teams to uphold Zero Trust and best practices.

Formación

• Strong hands-on experience with Microsoft Azure, including networking, compute, containers, monitoring, and automation.
• Deep understanding of Microsoft Entra ID (Azure Active Directory), identity security concepts, RBAC, conditional access, and application registrations.
• Practical experience implementing and supporting Azure AD B2C including custom journeys and integrations.
• Proficiency with automation and infrastructure-as-code (e.g., Terraform, Bicep, PowerShell, Azure CLI).
• Experience securing cloud environments using Azure-native tools (Defender for Cloud, Sentinel, Key Vault).
• Knowledge of CI/CD pipelines (Azure DevOps or GitHub Actions).
• Familiarity with OAuth2, OpenID Connect, SAML, JWT, and modern identity protocols.
• Strong problem-solving and troubleshooting skills, especially in distributed cloud environments.
• Excellent communication skills and ability to collaborate with cross-functional teams.

Responsabilidades

• Design, deploy, and maintain cloud infrastructure in Microsoft Azure, leveraging services such as Azure Compute, Networking, Storage, App Services, Key Vault, and Azure Monitor.
• Manage and optimize identity and access solutions in Microsoft Entra ID, including conditional access policies, MFA enforcement, SSO integrations, role-based access control, and lifecycle management.
• Develop, configure, and maintain Azure AD B2C tenant(s) for customer identity and access, including custom policies, user flows, branding, API connectors, and secure integration with applications.
• Build and maintain Infrastructure-as-Code solutions using tools such as Bicep, ARM templates, Terraform, or Azure DevOps pipelines.
• Monitor, troubleshoot, and optimize cloud resources for availability, performance, cost, and security.
• Work closely with security teams to implement Zero Trust principles, identity governance, and cloud security best practices.
• Support incident response, root cause analysis, and service restoration for cloud and identity-related issues.
• Partner with application teams to design secure authentication/authorization patterns for internal and external applications.
• Contribute to cloud architecture, standards, governance, and documentation.
• Participate in on-call rotation and operational support as needed.

Conocimientos

Microsoft Azure

Azure Entra ID

RBAC

Azure AD B2C

IaC

Terraform

Bicep

PowerShell

Azure DevOps

Azure CLI

Automation

Security concepts

CI/CD

OAuth2/OpenID Connect

SAML/JWT

Troubleshooting

Communication

Herramientas

Terraform

Bicep

PowerShell

Azure CLI

Azure DevOps

GitHub Actions

Azure Monitor

Key Vault

Descripción del empleo

Job Posting Title: Cloud Engineer

Open Position

• Full-time 40-hour work weeks
• Supports the Information Services Division
• Salary is up to $87,500 based on education and experience
• Position reports on site in Oklahoma City
• Sponsorship: At this time, we cannot offer sponsorship now or in the future.

Benefits

• Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.
• A comprehensive Benefit Package with a generous benefit allowance to offset the cost of insurance premiums for employees and their eligible dependents.

Responsibilities

• Design, deploy, and maintain cloud infrastructure in Microsoft Azure, leveraging services such as Azure Compute, Networking, Storage, App Services, Key Vault, and Azure Monitor.
• Manage and optimize identity and access solutions in Microsoft Entra ID, including conditional access policies, MFA enforcement, SSO integrations, role-based access control, and lifecycle management.
• Develop, configure, and maintain Azure AD B2C tenant(s) for customer identity and access, including custom policies, user flows, branding, API connectors, and secure integration with applications.
• Build and maintain Infrastructure-as-Code solutions using tools such as Bicep, ARM templates, Terraform, or Azure DevOps pipelines.
• Monitor, troubleshoot, and optimize cloud resources for availability, performance, cost, and security.
• Work closely with security teams to implement Zero Trust principles, identity governance, and cloud security best practices.
• Support incident response, root cause analysis, and service restoration for cloud and identity-related issues.
• Partner with application teams to design secure authentication/authorization patterns for internal and external applications.
• Contribute to cloud architecture, standards, governance, and documentation.
• Participate in on-call rotation and operational support as needed.

This position works in a comfortable office setting with a computer for a large percentage of the workday. The noise level in the work environment is usually mild. Occasional travel may be required.

Required Skills & Experience

• Strong hands-on experience with Microsoft Azure, including networking, compute, containers, monitoring, and automation.
• Deep understanding of Microsoft Entra ID (Azure Active Directory), identity security concepts, RBAC, conditional access, and application registrations.
• Practical experience implementing and supporting Azure AD B2C including custom journeys and integrations.
• Proficiency with automation and infrastructure-as-code (e.g., Terraform, Bicep, PowerShell, Azure CLI).
• Experience securing cloud environments using Azure-native tools (Defender for Cloud, Sentinel, Key Vault).
• Knowledge of CI/CD pipelines (Azure DevOps or GitHub Actions).
• Familiarity with OAuth2, OpenID Connect, SAML, JWT, and modern identity protocols.
• Strong problem-solving and troubleshooting skills, especially in distributed cloud environments.
• Excellent communication skills and ability to collaborate with cross-functional teams.

Preferred Qualifications

• Microsoft certifications such as:
• Azure Administrator (AZ-104)
• Azure Solutions Architect (AZ-305)
• Microsoft Identity and Access Administrator (SC-300)
• Experience with API Management, Functions, and microservices architectures.
• Background in security or networking.
• Experience supporting hybrid identity scenarios.

About OMES

The Office of Management and Enterprise Services provides excellent service, expert guidance and continuous improvement in support of our partners' goals. We are a highly qualified workforce committed to serve those who serve Oklahomans and make government run in the most efficient, innovative manner possible.

OMES is an Equal Opportunity Employer. Reasonable accommodation to individuals with disabilities may be provided upon request.

Equal Opportunity Employment

The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.

Current active State of Oklahoma employees must apply for open positions internally through the Workday Jobs Hu