Principal Cloud DevOps Engineer

OneStream; United States; On-site; USD 151,000 - 196,000; Full time

Benefits offered by this job

Excellent Medical Plan

Life Insurance

Short & Long Term Disability

Vacation Time

Paid Holidays

Professional Development

Retirement Plan

Job summary

OneStream Software is seeking a Principal Cloud Engineer to lead cloud engineering strategy across CI/CD, IaC, containers/AKS, and security. You will design scalable, secure cloud environments on Azure, drive multi-region reliability, and mentor engineers while aligning with product, security, and compliance teams.

In this role you will own the Terraform codebase end-to-end, implement security-as-code, and shape cost-aware architectures. Travel is limited and compensation reflects seniority.

Qualifications

• BS/BA in Computer Science, Engineering, or related field.
• 10+ years in cloud infrastructure, DevOps, or platform engineering including IaC, CI/CD & GitOps.
• Experience owning technical strategy and driving org-wide standards.
• Proven impact on improving developer experience.
• Deep understanding of the Azure Well-Architected Framework.

Responsibilities

• Own technical strategy and multi-quarter roadmaps across Cloud Engineering domains.
• Represent Cloud Engineering in cross-functional leadership forums.
• Lead complex, multi-quarter initiatives spanning departments and teams.
• Serve as escalation point for complex production issues and debt resolution.
• Mentor engineers and scale technical leadership without direct authority.
• Design reusable Terraform modules and AKS blueprints for self-serve use.
• Embed security-as-code with Terraform resources and security tooling.
• Design for reliability with multi-region failover and DR planning.

Tools

Terraform

AKS

Azure

Defender for Containers

Azure Monitor

Log Analytics

Application Insights

Job description

At OneStream, we're on a mission to empower every Finance organization and professional to exceed their potential. Our global teams span continents, cultures, and time zones, united by a shared purpose as we build the operating system for modern Finance and help organizations move with greater speed, clarity, and confidence.

That mission comes to life through our people. Behind every innovation, customer success, and milestone are talented people working together to make a difference. That's why we're looking for people who are bold enough to think big, authentic in how they lead and collaborate, curious about what's possible, and committed to delivering results.

Want a closer look before you apply? Explore our Careers site to learn more about our people, culture, and benefits.

Summary

OneStream Software is a hyper-growth SaaS company focused on financial and operational data analytics for the world’s largest companies. We host our software on Microsoft Azure across regions worldwide. This Principal-level role provides technical leadership in designing and automating scalable, secure cloud environments. The employee will shape cloud strategy, influence technical direction, resolve complex challenges, and mentor engineers across the organization. This role partners across teams to drive reliable, efficient cloud operations at scale.

Primary Duties and Responsibilities

• Own technical strategy and multi-quarter roadmaps across Cloud Engineering’s core domains (CI/CD, IaC, containers/AKS, observability, security).
• Represent Cloud Engineering in cross-functional and leadership forums, partnering with Product, Security, Compliance, Platform, and QE.
• Lead complex, multi-quarter initiatives spanning departments and engineering teams, driving alignment, adoption, and delivery.
• Serve as the escalation point for the most complex production issues and drive resolution of systemic technical debt.
• Mentor engineers and scale technical leadership and standards without relying on direct authority.
• Designing optimal solutions that take into consideration the ideal technical implementation while balancing the financial impacts to the organization.
• Own the Terraform codebase end to end: module design and versioning, remote state strategy on Azure Storage backends, state-splitting by lifecycle/ownership, and drift detection.
• Embed security-as-code: managed identities and workload identity federation by default, Key Vault integration, RBAC and Azure Policy defined as Terraform resources, and container image scanning via ACR / Defender for Containers.
• Design for reliability: multi-region failover (Traffic Manager / Front Door), backup and disaster recovery (Azure Backup, paired regions), observability (Azure Monitor, Log Analytics, Application Insights), as well as partner with development and business on SLO/error-budget definition.
• Design reusable, versioned Terraform modules and AKS blueprints that other engineering teams can self-serve our “paved road.”

Required Education and Experience

• BS/BA in Computer Science, Engineering, or related field.
• 10+ years of hands‑on experience in cloud infrastructure, DevOps, or platform engineering, including IaC (Terraform/Bicep), CI/CD & GitOps, and cloud architecture (Azure preferred).
• Demonstrated experience owning technical strategy and driving org-wide standards, not just team-level delivery.
• Proven transformative impact on improving developer experience.
• Deep understanding of the Azure Well Architected Framework.

Preferred Education and Experience

• Experience at a cloud service provider, managed service provider, or SaaS company.
• Experience shaping cloud-native strategy at scale, such as the Kubernetes/AKS platform, Azure SQL, AI Foundary, Azure APIM.
• Relevant certifications (e.g., AZ-305, AZ-400, CISSP) are a plus.
• Experience developing and solutioning for common compliance frameworks, such as FedRAMP, DoD IL4, SOC, SOX.

Knowledge, Skills, and Abilities

• Comfortable with high ambiguity; thinks strategically and abstractly.
• Strong presence and judgment; able to influence all levels of leadership.

Supervisory Responsibilities

This position has no supervisory responsibilities

Travel

Travel Requirement: Travel is not expected to exceed 10%.

Benefits at OneStream

OneStream employees are passionate, hardworking individuals who go above and beyond to keep our customers happy and follow through on our mission statement. They consistently deliver the best and in turn, we make every effort to keep them cared for and happy. A sample of the benefits we provide are:

• Excellent Medical Plan
• Life Insurance
• Short & Long Term Disability
• Vacation Time
• Paid Holidays
• Professional Development
• Retirement Plan

Gross annual base salary

$151,000 - $196,000 USD

All candidates must be legally authorized to work for any company in the country where this position is located without sponsorship.

OneStream may use the personal information you provide to process your application and contact you,in accordance withapplicable privacy laws such as the CCPA and GDPR. For more information about how we handle your personal information, please review OneStream's Privacy Policy .

Emails about job opportunities at OneStream are only sent by employees with an @onestreamsoftware.com email address. Reach out to your contact at OneStream if you suspect a phishingscam.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in OneStream’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.