Cloud Platform Engineering Lead/Manager - College Station, TX

Pivotal Solutions; College Station (TX); On-site; USD 190,000 - 260,000; Full time

Job summary

Pivotal Solutions in Texas is seeking a Cloud Platform Engineering Manager to own theAzure tenant and the Microsoft 365 estate, ensuring security, reliability, and regulatory compliance for a financial‑services platform. This leadership role combines hands‑on Azure/M365 expertise with governance, cost control, and collaboration with Information Security, Risk, Compliance, Audit, and application teams.

You will mentor engineers and drive policy‑as‑code, DR/BCP planning for mission‑critical

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 10+ years in infrastructure, cloud, or platform engineering with 4+ years in Azure.
• 1–3 years leading technical teams and enterprise platforms.
• Expertise in Azure governance, Entra ID, networking, IaC, and cloud ops.
• Strong cloud security knowledge including Zero Trust, IAM, encryption.
• Experience in regulated industries with audits and regulatory exams preferred.
• DR/BCP design, testing, and implementation experience.
• Preferred Azure certifications and security/governance credentials.

Responsibilities

• Own design, governance, and lifecycle of the Azure tenant and M365 suite.
• Define guardrails and policy-as-code; enforce standards across the tenant.
• Own enterprise identity with Entra ID, including conditional access and RBAC.
• Maintain platform roadmap aligned with IT strategy and priorities.
• Own security posture with Zero Trust and defense‑in‑depth controls.
• Ensure encryption, key management, and continuous monitoring.
• Satisfy regulatory requirements and support audits and examinations.
• Lead remediation of audit findings within agreed timelines.
• Own availability, performance, and reliability with SLAs/SLOs.
• Design and test DR/BCP capabilities and RTO/RPO objectives.
• Establish observability and incident management; lead major incidents.
• Manage change, release, and configuration management per frameworks.
• Own cloud cost management, budgeting, forecasting, and chargeback.
• Manage relationships with Microsoft and MSP vendors.
• Support third‑party risk activities and procurement.
• Lead, mentor, and develop cloud platform engineering staff.
• Advise senior leadership on cloud risk, investment, and strategy.

Skills

Azure expertise

Leadership

Platform governance

Zero Trust security

FinOps

Regulatory audits

IaC

Entra ID

DR/BCP

Security mindset

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, or related field

Tools

Azure AD

Microsoft Purview

Defender for Cloud

Microsoft Sentinel

Azure Key Vault

Job description

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or an equivalent combination of education and relevant experience.
• Minimum of 10 years of progressive experience in infrastructure, cloud, or platform engineering, including at least 4 years specializing in Microsoft Azure.
• One to three years of leadership or people management experience, with a demonstrated ability to lead technical teams and manage enterprise platform environments.
• Expertise in Azure tenant governance, Microsoft Entra ID, networking, Infrastructure-as-Code (IaC), and cloud platform operations.
• Strong understanding of cloud security principles, including Zero Trust architecture, identity and access management, and encryption and key management.
• Experience within a regulated industry, preferably banking or financial services, with exposure to audits and regulatory examinations is strongly preferred.
• Proven ability to design, implement, and validate disaster recovery and business continuity strategies for mission-critical systems, along with exceptional communication skills to effectively present technical concepts, risks, and trade-offs to senior leadership.
• Preferred certifications include Microsoft Certified: Azure Solutions Architect Expert, Microsoft Certified: Azure Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert or Azure Security Engineer Associate, and security or governance certifications such as CISSP, CCSP, or CISM. FinOps Certified Practitioner certification is a plus.

JOB SUMMARY

• The Cloud Platform Engineering Manager is the designated owner and single point of accountability (DRI) for the client’s Microsoft cloud platform, spanning the Azure and Microsoft 365 environments (including Exchange Online, SharePoint Online, OneDrive, and Teams). This leader is accountable for the security posture, reliability, governance, cost, and engineering of these environments, ensuring they meet the regulatory and operational expectations of a financial institution.
• This hands‑on leadership role pairs deep Azure and Microsoft 365 expertise with clear ownership. The Manager sets platform direction within the strategy established by Senior IT Leadership, supports the engineering and operations staff who run the platform, and serves as the primary technical authority on Azure and Microsoft 365. They partner closely with Information Security, Risk, Compliance, Audit, and application teams — including on the data governance, retention, and information‑protection controls (e.g., Microsoft Purview) across the M365 estate — advise the SVP on cloud risk, investment, and strategy, and elevate decisions beyond the platform's defined authority.

ESSENTIAL FUNCTIONS

• Own the design, governance, and lifecycle of the Azure tenant and full M365 suite, aligned with the Azure Well‑Architected and Cloud Adoption Frameworks.
• Define and enforce guardrails, standards, and reference architecture through policy‑as‑code and Infrastructure‑as‑Code.
• Own enterprise identity within the tenant (Microsoft Entra ID), including conditional access, privileged access, and least‑privilege RBAC.
• Maintain the platform roadmap and prioritize work in alignment with the IT strategy.
• Own the security posture of the tenant in partnership with Information Security, applying Zero Trust and defense‑in‑depth controls.
• Ensure encryption in transit and at rest, robust key and secrets management (Azure Key Vault, HSM‑backed keys), and continuous monitoring (Microsoft Defender for Cloud, Sentinel, Purview).
• Ensure the tenant satisfies applicable requirements (e.g., FFIEC guidance, GLBA, SOX, PCI‑DSS, and relevant state/federal regulations) and support internal/external audits and regulatory examinations.
• Own remediation of cloud‑related audit and examination findings within agreed timelines.
• Own availability, performance, and reliability of the platform against defined SLAs/SLOs.
• Design, document, and regularly test high‑availability, backup, disaster recovery (DR), and business continuity (BCP) capabilities, including recovery objectives (RTO/RPO).
• Establish observability, alerting, incident management, and on‑call practices; lead major‑incident response and post‑incident reviews.
• Operate change, release, and configuration management in line with the frameworks.
• Own cloud cost management for the tenant — budgeting, forecasting, optimization, and chargeback.
• Manage the operational relationship with Microsoft and relevant MSP/third‑party vendors, including support, reservations, and licensing.
• Support third‑party risk activities for cloud vendors with TPRM and procurement.
• Lead, mentor, and develop cloud platform engineering and operations staff.
• Advise the SVP and senior stakeholders on cloud risk, investment, and trade‑offs; elevate decisions beyond the role's authority.
• Partner with Security, Risk, Compliance, Audit, and application teams to deliver secure, compliant, and reliable services.

REQUIRED SKILLS

• Experience migrating regulated workloads from on premises/data center environments to Azure.
• Familiarity with the broader Microsoft ecosystem (Microsoft 365, Defender suite, Sentinel, Purview) and hybrid connectivity.
• FinOps experience and demonstrated cloud cost optimization at scale.
• Experience supporting risk committees, auditors, or regulators.
• Experience building and managing SOC2 certifications
• Ownership — takes single‑threaded accountability for outcomes and sees issues through to resolution.
• Technical authority — deep, current Azure expertise with sound architectural and risk judgment.
• Security and risk mindset — treats security, compliance, and resilience as first‑class design constraints.
• Leadership — builds high‑performing teams and earns trust across technical and business stakeholders.
• Operational discipline — drives reliability, repeatability, and accountability through process and automation.