Platform Engineer

Charter Global; United States; Hybrid; USD 96,000 - 165,000; Full time

Job summary

Charter Global is seeking a hands-on DevOps/Cloud Platform Engineer to lead secure deployment and integration of platform automation across Azure and AWS. The role covers source-control, CI/CD, and cloud configuration, with emphasis on identity and security integration using Entra ID and related services.

You will work to deploy APIs, web apps, and portal components, using Terraform, Python, and React, in a remote-friendly setup with an onsite first week at a client office.

Qualifications

• Hands-on DevOps with cloud platform experience across Azure and AWS.
• Experience with identity integration and security (Entra ID, IAM, tokens).
• Proficiency in GitHub-based source-control, CI/CD, and IaC tooling.

Responsibilities

• Establish and maintain GitHub-based source-control, branching, code-review, and merge processes.
• Design and implement CI/CD pipelines for PAM APIs and front end, portal components, and cloud config.
• Package application code, infrastructure configuration, build scripts, dependencies, and function layers for deployment.
• Develop Terraform infrastructure-as-code configurations.
• Support deployment of Python APIs, React apps, and serverless components (Azure Functions/AWS Lambda).
• Configure separate development, testing, and production deployment workflows.
• Implement automated build, validation, security checks, approvals, and deployment steps.
• Support logging, monitoring, troubleshooting, rollback, and release documentation.
• Coordinate with client teams to deploy code into restricted environments.

Skills

GitHub source-control

CI/CD pipelines

Terraform IaC

Cloud platforms

Tools

Azure

AWS

Terraform

React

Python

Job description

Job Title: DevOps/Cloud Platform Engineer

Location: Remote/WFH and first week onsite at the nearest client office

Duration: 3 months+ contract

Description

DevOps / Cloud Platform Engineer with Identity integration Experience (Azure, Security)

Overview

Seeking a hands-on DevOps / Cloud Platform Engineer to lead the secure deployment and integration of platform automation capabilities across Azure and AWS. The engineer will establish source-control and CI/CD practices, package and deploy APIs and web applications, support infrastructure automation, and integrate the solution with the client's cloud identity and security environment. The role requires meaningful experience with Microsoft Entra ID, Azure API Management, application registrations, access tokens, workload identities, secrets management, and role-based access control. This is not simply a release-management role. The engineer must understand how application components authenticate, how user identity is passed between the portal and APIs, and how PAM determines whether a user is authorized to perform a privileged action.

Key Responsibilities

• Establish and maintain GitHub-based source-control, branching, code-review, and merge processes.
• Design and implement CI/CD pipelines for PAM APIs, the PAM front end, portal components, and supporting cloud configuration.
• Package application code, infrastructure configuration, build scripts, dependencies, and function layers for deployment.
• Develop and maintain infrastructure-as-code configurations using Terraform.
• Support deployment of Python APIs, React applications, Azure Functions or AWS Lambda components, and portal modules.
• Configure separate development, testing, and production deployment workflows.
• Implement automated build, validation, security-checking, approval, and deployment steps.
• Support logging, monitoring, troubleshooting, rollback, and release documentation.
• Work with the client's technical resources to deploy export-eligible code into restricted environments.

Azure Identity And Security Integration

• Integrate applications and APIs with Microsoft Entra ID.
• Create or configure application registrations, enterprise applications, service principals, managed identities, and associated permissions.
• Configure authentication flows for browser-based applications, APIs, and system-to-system integrations.
• Configure Azure API Management to receive and validate Microsoft Entra ID-issued JWT access tokens.
• Ensure identity and authorization claims are passed correctly from One Portal and the PAM front end to the PAM APIs.
• Integrate PAM APIs with the custom authorizer and ACL data store used to approve or deny requested actions.
• Configure API scopes, application roles, group claims, permission consent, and role-based access controls where required.
• Configure secure use of credentials, certificates, keys, tokens, and secrets through Azure Key Vault or the designated the client's secrets-management capability.
• Apply least-privilege access principles to users, applications, service identities, deployment pipelines, and cloud resources.
• Troubleshoot token validation, claims, API permissions, access denials, expired credentials, and application-identity issues.
• Coordinate with the client's identity, cybersecurity, cloud, and application teams to confirm security requirements and obtain approvals.

Platform And Portal Integration

• Support deployment and integration of the PAM front end into One Portal using React Module Federation.
• Support common SSO and authentication across One Portal and the agreed existing portal entry points.
• Configure application routing, environment variables, API endpoints, certificates, secrets, and deployment settings.
• Support deployment of the PAM ACL administration interface into the client's application framework.
• Establish the technical deployment pattern for independently developed portal components.
• Ensure that user identity remains consistent as a user moves from One Portal to the PAM front end and then invokes the PAM APIs.

Cloud And Infrastructure Support

• Support Azure and AWS deployment requirements associated with PAM and platform automation.
• Configure Azure API Management, Azure Functions, Key Vault, storage, logging, and identity integrations where applicable.
• Support AWS Lambda, IAM, storage, networking, and deployment configuration where PAM remains hosted in AWS.
• Develop Terraform automation that uses the client's existing cloud networking, security, and policy configurations.
• Support Databricks workspace endpoint configuration and integration across Azure Commercial and AWS.
• Follow the client's requirements for encryption, certificates, network connectivity, access restrictions, and technical-data handling.

Best Regards,

David Roy | Accounts Manager US Staffing | Charter Global Inc. | https://www.charterglobal.com