Senior Azure Cloud & GitHub Platform Engineer

System One; Merrifield (VA); Hybrid; USD 140,000 - 170,000; Full time

Job summary

System One in Vienna, VA seeks a Senior Azure Cloud & GitHub Platform Engineer to design, secure, automate, and support enterprise cloud platforms and CI/CD ecosystems. This senior role emphasizes platform architecture, Kubernetes operations, identity management, and governance across Azure and GitHub environments.

The candidate will lead improvements in platform reliability, deployment velocity, security posture, and developer productivity, collaborating with cross-functional teams and

Qualifications

• Bachelor's degree in a technical field.
• 7+ years in cloud/platform/DevOps or related roles.
• 5+ years hands-on Microsoft Azure experience.
• Experience with AKS, GitHub Enterprise, and IAM.

Responsibilities

• Design and support Azure cloud platform services and workloads.
• Deploy, manage, and optimize AKS and related Azure services.
• Administer GitHub Enterprise, organizations, teams, and policies.
• Develop and maintain CI/CD pipelines using GitHub Actions.
• Implement IAM and DevSecOps controls for security posture.
• Automate configuration and governance across cloud environments.
• Collaborate with development, security, and architecture teams.

Skills

Azure

AKS

GitHub Enterprise

GitHub Actions

IAM

DevSecOps

CI/CD

Kubernetes

Security

Automation

Education

Bachelor's Degree in Computer Science or related field

Tools

Azure Monitor

Log Analytics

Prometheus

Grafana

Packer

ARM Templates

Job description

Title: Senior Azure Cloud & GitHub Platform Engineer
Location: Vienna, VA
Work Schedule: hybrid, onsite 3 days a week
Pay Rate: Open to both W2 and established 1099's
Position Type: Multiyear Contract

This group is looking for a Senior Azure Cloud & GitHub Platform Engineer. Local candidates preferred. Candidates must have a minimum of 7+ years of professional cloud/platform/DevOps experience and at least 5 years of hands‑on Azure experience.

The three most critical areas for this position are:

• Azure and AKS
• GitHub Enterprise and GitHub Actions/CI/CD
• IAM and Cloud Security/DevSecOps

The person will build, manage, secure, automate, and troubleshoot enterprise Azure and Kubernetes platforms, while also managing GitHub Enterprise and GitHub Actions. This is a senior engineering role—not basic infrastructure administration.

The engineer will work with development, security, architecture, SRE, and product teams to create secure, automated, reliable, and scalable cloud platforms and CI/CD pipelines.

We are seeking an experienced Senior Azure Cloud & GitHub Platform Engineer to design, implement, secure, automate, and support enterprise cloud platforms, Kubernetes environments, developer platforms, and CI/CD ecosystems.

As the client continues to modernize its cloud‑native application landscape and software delivery capabilities, we require a highly skilled platform engineer who can provide expertise across Azure infrastructure, identity and access management, Kubernetes administration, GitHub Enterprise, automation frameworks, and deployment pipelines. The successful candidate will serve as a technical leader responsible for ensuring cloud platforms are secure, reliable, scalable, observable, and production‑ready.

This is not a traditional infrastructure administration role. It is a specialized engineering position focused on cloud platform architecture, Kubernetes operations, identity management, GitHub administration, automation engineering, deployment governance, and DevSecOps enablement. The individual will work closely with Application Development teams, Platform Engineering, Information Security, Architecture, SRE, and Product Owners to build and operate enterprise‑grade cloud and development platforms.

The Senior Azure Cloud & GitHub Platform Engineer will play a critical role in enabling secure software delivery, cloud tenancy management, infrastructure automation, deployment standardization, and developer productivity across the organization.

Key Responsibilities

• Design, implement, administer, and support Azure cloud platform services and enterprise workloads.
• Deploy, manage, and optimize Azure services including:
  • Azure Kubernetes Service (AKS)
  • Azure Service Bus
  • Azure Storage Accounts
  • Azure Functions
  • Azure App Services
  • Azure Key Vault
  • Azure API Management
  • Azure Monitor
  • Log Analytics
  • Azure Networking Services
• Design and maintain highly available, resilient, scalable, and secure cloud‑native architectures.
• Deploy, administer, and support AKS clusters including:
  • Cluster provisioning
  • Upgrades and patching
  • Ingress controllers
  • Autoscaling
  • Networking configurations
  • Monitoring and observability
  • Workload security
• Implement and manage Identity and Access Management (IAM) solutions utilizing:
  • Microsoft Entra ID
  • RBAC
  • Managed Identities
  • Service Principals
  • Conditional Access
  • Privileged Identity Management (PIM)
• Establish least‑privilege access models and governance standards across cloud environments.
• Automate and standardize the configuration/administration of GitHub Enterprise environments including:
  • Organizations
  • Teams
  • Repositories
  • Branch Protection Policies
  • Repository Rulesets
  • Security Policies
  • Secret Management
  • Enterprise Governance Controls
• Deploy and support GitHub Apps, OAuth integrations, webhooks, and enterprise authentication mechanisms.
• Design, develop, and maintain CI/CD pipelines utilizing:
  • GitHub Actions
  • Reusable Workflows
  • Composite Actions
  • Self‑Hosted Runners
  • GitHub Enterprise Integrations
• Administer GitHub‑hosted and self‑hosted runners including provisioning, scaling, security hardening, upgrades, and lifecycle management.
• Implement secure workload authentication using:
  • OpenID Connect (OIDC)
  • Managed Identities
  • Federated Credentials
  • Secretless Authentication Patterns
• Develop Infrastructure as Code (IaC) solutions using:
  • Packer
  • ARM Templates
• Integrate CI/CD pipelines with Azure cloud services and Kubernetes environments.
• Implement deployment strategies including:
  • Blue‑Green Deployments
  • Canary Releases
  • Rolling Updates
• Establish DevSecOps controls and automated quality gates across software delivery pipelines.
• Support software supply chain security initiatives, dependency management, vulnerability remediation, and compliance requirements.
• Implement and maintain monitoring, logging, and observability solutions utilizing:
  • Azure Monitor
  • Log Analytics
  • Application Insights
  • Prometheus
  • Grafana
• Troubleshoot cloud infrastructure, Kubernetes, identity, networking, CI/CD, and application deployment issues.
• Create operational runbooks, architecture documentation, platform standards, and engineering best practices.
• Partner with development teams to improve platform reliability, deployment velocity, security posture, and operational effectiveness.
• Support production incidents, root‑cause analysis activities, and continuous improvement initiatives.

Required Qualifications

• Bachelor's Degree in Computer Science, Information Systems, Software Engineering, Engineering, or a related technical field.
• 7+ years of experience in Cloud Engineering, Platform Engineering, DevOps Engineering, Site Reliability Engineering (SRE), or related technical disciplines.
• 5+ years of hands‑on experience working with Microsoft Azure cloud services.
• Strong experience administering and supporting:
  • Azure Kubernetes Service (AKS)
  • Azure Functions
  • Azure Service Bus
  • Azure Storage Accounts
  • Azure App Services
  • Azure Networking Services
  • Azure Key Vault
• Strong expertise in Identity and Access Management including:
  • Microsoft Entra ID
  • RBAC
  • Managed Identities
  • Service Principals
  • Conditional Access
  • PIM