Cloud Operations Engineer

The Atlas Group; Bensalem Township, Northern (Bucks County, KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

The Atlas Group is seeking a Cloud Operations Engineer to ensure reliability, scalability, and security of Azure, M365, and hybrid cloud infrastructure. You will move toward infrastructure as code, build automated pipelines, and enforce federal compliance standards.

You will lead IaC deployments, automate tasks, and optimize cloud spend while collaborating with cybersecurity and business teams to maintain highly available systems.

Qualifications

• 3+ years of direct experience in enterprise Microsoft Azure environments.
• 5+ years IT infra, networking, or systems engineering experience.
• Automation skills with PowerShell, Bash, or Python.
• Hands-on IaC with Terraform, Bicep, or ARM templates.
• Strong cloud networking and hybrid site-to-site connectivity.
• Zero-trust concepts and least privilege enforcement.

Responsibilities

• Manage IaC for Azure resources using Terraform, Bicep, or ARM for repeatable environments.
• Automate operations with robust scripts and tooling.
• Maintain secure, high-availability hybrid cloud networks and monitoring.
• Lead security/compliance efforts aligned with federal standards.

Skills

Cloud Operations

Systems Engineering

Automation & Scripting

Modern Deployment

Cloud Networking

Security Mindset

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent

Tools

Terraform

Azure Bicep

ARM templates

PowerShell

Python

Azure DevOps

GitHub Actions

Job description

Overview

The Cloud Operations Engineer is responsible for ensuring the reliability, scalability, security, and performance of our Microsoft Azure, Microsoft 365, and hybrid cloud infrastructure. In this role, you will move past manual configurations to treat infrastructure as code, build automated operations pipelines, and establish proactive monitoring frameworks. You will partner with cybersecurity, infrastructure, and business teams to maintain highly available cloud systems while enforcing strict federal compliance standards.

Responsibilities

Infrastructure Management & Automation

• Infrastructure as Code (IaC): Author, test, and deploy Azure resources using Terraform, Azure Bicep, or ARM templates to ensure consistent and repeatable environments.
• Operations Automation: Eliminate manual tasks by writing robust automation scripts utilizing PowerShell, Azure CLI, or Python.
• Configuration Management: Implement and maintain automated tooling to ensure configuration consistency across all virtual machines and services.
• FinOps & Cost Optimization: Actively track, analyze, and optimize cloud spend using Azure Cost Management, Azure Advisor, and resource scheduling.

Cloud Networking, Governance & Monitoring

• Advanced Networking: Configure and maintain secure, high-availability hybrid networks, including VNets, Hub-Spoke topologies, Azure Firewall, ExpressRoute, and VPN Gateways.
• Observability & Alerting: Design and manage proactive monitoring dashboards, centralized logging, and automated alerting utilizing Azure Monitor, Log Analytics, and KQL (Kusto Query Language).
• Cloud Governance: Define and enforce compliance boundaries across all subscriptions using Azure Policy and Blueprints.
• Identity & Access Management: Manage Microsoft Entra ID (Azure AD) architecture, ensuring secure access via advanced Conditional Access Policies, PIM, and Single Sign-On (SSO).

Security, Compliance & Data Protection

• Framework Compliance: Operationalize and maintain security controls to satisfy CMMC Level 2, NIST SP 800-171, and FedRAMP frameworks.
• Vulnerability & Incident Response: Review and triage alerts within Microsoft Defender for Cloud and Microsoft Sentinel, executing automated or manual remediation workflows.
• Disaster Recovery Operations: Design, document, and continuously test automated backup validation and failover pipelines utilizing Azure Backup and Azure Site Recovery (ASR).

Enterprise Modern Workplace Support

• Tier III Escalation: Act as the highest internal technical escalation point for complex cloud infrastructure, networking, and enterprise application failures.
• End-User Computing: Oversee and scale enterprise deployments of Azure Virtual Desktop (AVD), Microsoft Intune (Endpoint Manager), and Exchange Online.

Qualifications

Required Experience & Skills

• Cloud Operations: 3+ years of direct experience engineering, provisioning, and maintaining enterprise Microsoft Azure environments.
• Systems Engineering: 5+ years of overall experience in IT infrastructure, networking, or systems engineering.
• Automation & Scripting: Demonstrated ability to build production-grade automation using PowerShell, Bash, or Python.
• Modern Deployment: Direct hands-on experience deploying cloud resources via IaC frameworks (Terraform, Bicep, or ARM).
• Cloud Networking: Strong proficiency in cloud routing, network security groups (NSGs), firewalls, and hybrid site-to-site connectivity.
• Security Mindset: Practical experience executing zero-trust methodologies and enforcing the Principle of Least Privilege.

Preferred Experience & Education

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
• Industry Context: Prior experience supporting IT operations within highly regulated environments, such as aerospace, defense, or manufacturing.
• CI/CD Pipelines: Exposure to Azure DevOps or GitHub Actions for automated deployment pipelines.

Preferred Certifications

• Microsoft Certified: Azure Administrator Associate (AZ-104) (Highly Preferred)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft 365 Certified: Administrator Expert (MS-102)
• CompTIA Security+ or CISSP