Cloud Operations Engineer

The Atlas Group; Phoenix (AZ); On-site; USD 90,000 - 150,000; Full time

Job summary

The Atlas Group is seeking a Cloud Operations Engineer to ensure Azure, Microsoft 365, and hybrid cloud infrastructure reliability, security, and performance in a regulated environment.

You will drive IaC deployments (Terraform, Azure Bicep, ARM), automate operations with PowerShell/Python, and implement proactive monitoring and cost optimization while maintaining strict compliance with federal standards.

Qualifications

• 3+ years experience engineering, provisioning, and maintaining enterprise Microsoft Azure environments.
• 5+ years of overall IT infrastructure, networking, or systems engineering experience.
• Automation using PowerShell, Bash, or Python in production.
• Hands-on IaC with Terraform, Bicep, or ARM for deployments.
• Strong cloud routing, NSGs, firewalls, and hybrid connectivity skills.
• Knowledge of zero-trust and least privilege security principles.

Responsibilities

• Engineer, provision, and maintain enterprise Microsoft Azure environments.
• Build automated operations pipelines and IaC-driven deployments.
• Configure secure, high-availability hybrid networks and governance controls.
• Implement monitoring, cost management, and observability dashboards.
• Serve as Tier III escalation for complex cloud infrastructure issues.
• Support End-User Computing with Azure Virtual Desktop and Exchange Online.

Skills

Cloud Operations

Systems Engineering

Automation & Scripting

Modern Deployment

Cloud Networking

Security Mindset

Education

Bachelor's degree

Tools

Terraform

Azure DevOps

GitHub Actions

PowerShell

Python

Job description

Overview

The Cloud Operations Engineer is responsible for ensuring the reliability, scalability, security, and performance of our Microsoft Azure, Microsoft 365, and hybrid cloud infrastructure. In this role, you will move past manual configurations to treat infrastructure as code, build automated operations pipelines, and establish proactive monitoring frameworks. You will partner with cybersecurity, infrastructure, and business teams to maintain highly available cloud systems while enforcing strict federal compliance standards.

Responsibilities

Infrastructure Management & Automation

• Infrastructure as Code (IaC): Author, test, and deploy Azure resources using Terraform, Azure Bicep, or ARM templates to ensure consistent and repeatable environments.
• Operations Automation: Eliminate manual tasks by writing robust automation scripts utilizing PowerShell, Azure CLI, or Python.
• Configuration Management: Implement and maintain automated tooling to ensure configuration consistency across all virtual machines and services.
• FinOps & Cost Optimization: Actively track, analyze, and optimize cloud spend using Azure Cost Management, Azure Advisor, and resource scheduling.

Cloud Networking, Governance & Monitoring

• Advanced Networking: Configure and maintain secure, high-availability hybrid networks, including VNets, Hub-Spoke topologies, Azure Firewall, ExpressRoute, and VPN Gateways.
• Observability & Alerting: Design and manage proactive monitoring dashboards, centralized logging, and automated alerting utilizing Azure Monitor, Log Analytics, and KQL (Kusto Query Language).
• Cloud Governance: Define and enforce compliance boundaries across all subscriptions using Azure Policy and Blueprints.
• Identity & Access Management: Manage Microsoft Entra ID (Azure AD) architecture, ensuring secure access via advanced Conditional Access Policies, PIM, and Single Sign-On (SSO).

Security, Compliance & Data Protection

• Framework Compliance: Operationalize and maintain security controls to satisfy CMMC Level 2, NIST SP 800-171, and FedRAMP frameworks.
• Vulnerability & Incident Response: Review and triage alerts within Microsoft Defender for Cloud and Microsoft Sentinel, executing automated or manual remediation workflows.
• Disaster Recovery Operations: Design, document, and continuously test automated backup validation and failover pipelines utilizing Azure Backup and Azure Site Recovery (ASR).

Enterprise Modern Workplace Support

• Tier III Escalation: Act as the highest internal technical escalation point for complex cloud infrastructure, networking, and enterprise application failures.
• End-User Computing: Oversee and scale enterprise deployments of Azure Virtual Desktop (AVD), Microsoft Intune (Endpoint Manager), and Exchange Online.

Qualifications

Required Experience & Skills

• Cloud Operations: 3+ years of direct experience engineering, provisioning, and maintaining enterprise Microsoft Azure environments.
• Systems Engineering: 5+ years of overall experience in IT infrastructure, networking, or systems engineering.
• Automation & Scripting: Demonstrated ability to build production-grade automation using PowerShell, Bash, or Python.
• Modern Deployment: Direct hands-on experience deploying cloud resources via IaC frameworks (Terraform, Bicep, or ARM).
• Cloud Networking: Strong proficiency in cloud routing, network security groups (NSGs), firewalls, and hybrid site-to-site connectivity.
• Security Mindset: Practical experience executing zero-trust methodologies and enforcing the Principle of Least Privilege.

Preferred Experience & Education

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
• Industry Context: Prior experience supporting IT operations within highly regulated environments, such as aerospace, defense, or manufacturing.
• CI/CD Pipelines: Exposure to Azure DevOps or GitHub Actions for automated deployment pipelines.

Preferred Certifications

• Microsoft Certified: Azure Administrator Associate (AZ-104) (Highly Preferred)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft 365 Certified: Administrator Expert (MS-102)
• CompTIA Security+ or CISSP