Cloud Engineer

State of Oklahoma; Oklahoma City (OK); Presencial; USD 79.000 - 96.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Generous leave

Comprehensive benefits package

Descripción de la vacante

State of Oklahoma seeks a Cloud Engineer to design, deploy, and maintain Azure-based cloud infrastructure in Oklahoma City. The role focuses on identity and access in Entra ID, B2C configs, and secure architecture, with IaC and automation emphasized.

Responsibilities include monitoring, cost optimization, security alignment with Zero Trust, and liaison with application teams. On-site position with full-time hours; sponsorship not available.

Formación

• Experience with Microsoft Azure across networking, compute, containers, monitoring and automation.
• In-depth knowledge of Microsoft Entra ID (Azure AD), RBAC, conditional access, and application registrations.
• Experience implementing Azure AD B2C including custom journeys and integrations.
• Proficiency with IaC and automation (Terraform, Bicep, PowerShell, Azure CLI).
• Familiarity with cloud security tools (Defender for Cloud, Sentinel, Key Vault) and CI/CD pipelines.

Responsabilidades

• Design, deploy, and maintain cloud infrastructure in Microsoft Azure.
• Manage identity and access solutions including Entra ID and B2C configurations.
• Build and maintain IaC: Terraform, Bicep, ARM templates, or Azure DevOps pipelines.
• Monitor, troubleshoot, and optimize cloud resources for availability, performance, cost, and security.
• Collaborate with security teams to implement Zero Trust and cloud security best practices.
• Support incident response and root-cause analyses for cloud and identity issues.
• Partner with application teams on secure authentication/authorization patterns.
• Contribute to cloud architecture, governance, and documentation.
• Participate in on-call rotation and operational support.

Conocimientos

Problem solving

Communication

Team collaboration

Security mindset

Analytical thinking

Herramientas

Microsoft Azure

Azure Compute

Azure Networking

Azure Storage

App Services

Key Vault

Azure Monitor

Azure AD Entra ID

RBAC

Conditional access

SSO

Azure AD B2C

Terraform

Bicep

ARM templates

Azure DevOps

GitHub Actions

PowerShell

Azure CLI

Defender for Cloud

Sentinel

OAuth2

OpenID Connect

SAML

JWT

Descripción del empleo

Job Posting Title

Cloud Engineer

Agency

090 OFFICE OF MANAGEMENT AND ENTERPRISE SERV

Supervisory Organization

IS-Servers

Job Posting End Date

Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.

Estimated Appointment End Date (Continuous if Blank)

Full/Part-Time

Full time

Job Type

Regular

Compensation

Job Details

• Full-time 40-hour work weeks
• Supports the Information Services Division
• Salary is up to $87,500 based on education and experience
• Position reports on site in Oklahoma City
• Sponsorship: At this time, we cannot offer sponsorship now or in the future.

Job Description

As a Cloud Engineer with OMES you will enjoy:

• Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.
• A comprehensive Benefit Package with a generous benefit allowance to offset the cost of insurance premiums for employees and their eligible dependents.

Job Details

• Full-time 40-hour work weeks
• Supports the Information Services Division
• Salary is up to $87,500 based on education and experience
• Position reports on site in Oklahoma City
• Sponsorship: At this time, we cannot offer sponsorship now or in the future.

Responsibilities

• Design, deploy, and maintain cloud infrastructure in Microsoft Azure, leveraging services such as Azure Compute, Networking, Storage, App Services, Key Vault, and Azure Monitor.
• Manage and optimize identity and access solutions in Microsoft Entra ID, including conditional access policies, MFA enforcement, SSO integrations, role-based access control, and lifecycle management.
• Develop, configure, and maintain Azure AD B2C tenant(s) for customer identity and access, including custom policies, user flows, branding, API connectors, and secure integration with applications.
• Build and maintain Infrastructure-as-Code solutions using tools such as Bicep, ARM templates, Terraform, or Azure DevOps pipelines.
• Monitor, troubleshoot, and optimize cloud resources for availability, performance, cost, and security.
• Work closely with security teams to implement Zero Trust principles, identity governance, and cloud security best practices.
• Support incident response, root cause analysis, and service restoration for cloud and identity-related issues.
• Partner with application teams to design secure authentication/authorization patterns for internal and external applications.
• Contribute to cloud architecture, standards, governance, and documentation.
• Participate in on-call rotation and operational support as needed.

Physical Demands and Work Environment

This position works in a comfortable office setting with a computer for a large percentage of the workday. The noise level in the work environment is usually mild. Occasional travel may be required.

Required Skills & Experience

• Strong hands-on experience with Microsoft Azure, including networking, compute, containers, monitoring, and automation.
• Deep understanding of Microsoft Entra ID (Azure Active Directory), identity security concepts, RBAC, conditional access, and application registrations.
• Practical experience implementing and supporting Azure AD B2C including custom journeys and integrations.
• Proficiency with automation and infrastructure-as-code (e.g., Terraform, Bicep, PowerShell, Azure CLI).
• Experience securing cloud environments using Azure-native tools (Defender for Cloud, Sentinel, Key Vault).
• Knowledge of CI/CD pipelines (Azure DevOps or GitHub Actions).
• Familiarity with OAuth2, OpenID Connect, SAML, JWT, and modern identity protocols.
• Strong problem-solving and troubleshooting skills, especially in distributed cloud environments.
• Excellent communication skills and ability to collaborate with cross-functional teams.

Preferred Qualifications

• Microsoft certifications such as:
  • Azure Administrator (AZ-104)
  • Azure Solutions Architect (AZ-305)
  • Microsoft Identity and Access Administrator (SC-300)
• Experience with API Management, Functions, and microservices architectures.
• Background in security or networking.
• Experience supporting hybrid identity scenarios.

About OMES

The Office of Management and Enterprise Services provides excellent service, expert guidance and continuous improvement in support of our partners’ goals. We are a highly qualified workforce committed to serve those who serve Oklahomans and make government run in the most efficient, innovative manner possible.

OMES is an Equal Opportunity Employer. Reasonable accommodation to individuals with disabilities may be provided upon request.

Equal Opportunity Employment

The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.

Current active State of Oklahoma employees must apply for open positions internally through the Workday Jobs Hub.