Senior Azure Cloud & GitHub Platform Engineer (Hybrid)

Brooklyn Arts Council; Vienna (VA); Hybrid; USD 120,000 - 166,000; Full time

Benefits offered by this job

Comprehensive Medical insurance

Employer-Paid Life Insurance

Employer-Paid Disability Insurance

401(k)

Paid Time Off (PTO) and holidays

Educational Assistance

Job summary

BRMi seeks a Senior Azure Cloud & GitHub Platform Engineer to design, implement, and secure enterprise cloud platforms. You will lead AKS deployments, manage GitHub Enterprise, and build robust CI/CD pipelines with GitHub Actions, while enforcing DevSecOps practices for secure software delivery.

You will collaborate with multiple engineering teams to ensure scalable, compliant, and observable platforms, leveraging IaC and automation to improve reliability and velocity.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or related technical field.
• 7+ years in Cloud/Platform/DevOps/SRE or related area.
• 5+ years hands-on Azure/Azure services experience.
• Strong AKS and Kubernetes administration.
• Experience with GitHub Enterprise and CI/CD pipelines.
• Experience automating infrastructure with IaC (Packer, ARM).
• Scripting with PowerShell, Bash, Python.

Responsibilities

• Design, implement, administer, and support Azure cloud platforms and workloads.
• Manage AKS clusters, ingress, autoscaling, networking, and security.
• Administer GitHub Enterprise, orgs, teams, repos, and governance controls.
• Develop CI/CD pipelines using GitHub Actions and workflows.
• Automate infrastructure with IaC (Packer, ARM) and support deployment strategies.
• Implement DevSecOps controls and security checks across delivery pipelines.

Skills

Azure

AKS

GitHub Enterprise

CI/CD

PowerShell

Python

IaC (Packer & ARM)

GitHub Actions

Education

Bachelor's degree in Computer Science or related field

Tools

Azure Kubernetes Service

GitHub Enterprise

GitHub Actions

Packer

ARM templates

OpenID Connect (OIDC)

Job description

Overview

The Senior Azure Cloud & GitHub Platform Engineer will design, implement, secure, automate, and support enterprise cloud and developer platforms supporting modern application delivery. This role will provide hands‑on engineering and technical leadership across Microsoft Azure, Azure Kubernetes Service (AKS), identity and access management, GitHub Enterprise, CI/CD pipelines, infrastructure automation, and platform observability.

This position will work closely with Application Development, Platform Engineering, Information Security, Architecture, Site Reliability Engineering (SRE), and Product teams to ensure cloud and development platforms are secure, scalable, resilient, and production ready. The engineer will also help establish standardized deployment patterns, governance controls, automation frameworks, and self‑service capabilities that improve developer productivity and accelerate secure software delivery.

This is a hands‑on engineering role requiring deep technical expertise across cloud infrastructure, Kubernetes, GitHub administration, automation, and DevSecOps practices.

Benefits:

• Comprehensive Medical, Dental, and Vision Insurance
• Employer-Paid Life Insurance
• Employer-Paid Short-Term and Long-Term Disability Insurance
• 401(k)
• Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays
• Educational Assistance

Salary: $120-166K

Hybrid in Vienna, VA

An In Person interview will be required for this role prior to offer.

Responsibilities

• Design, implement, administer, and support Microsoft Azure cloud platforms and enterprise application workloads.
• Deploy, configure, and maintain Azure services including Azure Kubernetes Service (AKS), Azure Service Bus, Storage Accounts, Azure Functions, App Services, Key Vault, API Management, Azure Monitor, Log Analytics, and Azure networking services.
• Design highly available, resilient, scalable, and secure cloud-native architectures that support enterprise application requirements.
• Provision, administer, upgrade, patch, secure, and optimize AKS clusters and associated Kubernetes workloads.
• Manage Kubernetes capabilities including ingress controllers, autoscaling, networking, workload security, monitoring, and observability.
• Implement and administer identity and access management solutions using Microsoft Entra ID, Role-Based Access Control (RBAC), Managed Identities, Service Principals, Conditional Access, and Privileged Identity Management (PIM).
• Establish and maintain least-privilege access models and cloud governance standards across Azure environments.
• Administer and automate GitHub Enterprise environments, including organizations, teams, repositories, repository rulesets, branch protection policies, security policies, secrets, and enterprise governance controls.
• Configure and support GitHub Apps, OAuth integrations, webhooks, enterprise authentication, and other GitHub platform integrations.
• Design, develop, and maintain CI/CD pipelines using GitHub Actions, reusable workflows, composite actions, and enterprise integrations.
• Provision, secure, scale, upgrade, and maintain GitHub-hosted and self-hosted runners.
• Implement secure workload authentication using OpenID Connect (OIDC), Managed Identities, federated credentials, and secretless authentication patterns.
• Develop and maintain Infrastructure as Code solutions using Packer and ARM templates to automate and standardize cloud infrastructure deployments.
• Integrate CI/CD pipelines with Azure cloud services, Kubernetes environments, security controls, and application deployment processes.
• Implement and support deployment strategies including blue-green deployments, canary releases, and rolling updates.
• Establish DevSecOps controls, automated quality gates, and security checks throughout the software delivery lifecycle.
• Support software supply chain security, dependency management, vulnerability remediation, and applicable compliance requirements.
• Implement and maintain monitoring, logging, alerting, and observability capabilities using Azure Monitor, Log Analytics, Application Insights, Prometheus, and Grafana.
• Troubleshoot complex issues involving Azure infrastructure, Kubernetes, identity, networking, GitHub, CI/CD pipelines, and application deployments.
• Develop automation using PowerShell, Bash, Python, and other scripting technologies to improve platform reliability and reduce manual administration.
• Create and maintain operational runbooks, architecture documentation, engineering standards, deployment procedures, and platform best practices.
• Partner with application development teams to improve platform reliability, deployment velocity, security, and developer experience.
• Provide technical guidance and leadership across engineering teams on cloud, Kubernetes, GitHub, automation, and DevSecOps practices.
• Support production incidents, root-cause analysis, problem resolution, and continuous improvement initiatives.
• Perform other duties as required.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Software Engineering, Engineering, or a related technical field.
• 7+ years of experience in Cloud Engineering, Platform Engineering, DevOps Engineering, Site Reliability Engineering (SRE), or a related technical discipline.
• 5+ years of hands‑on experience designing, implementing, or supporting Microsoft Azure environments.
• Strong hands‑on experience with Azure Kubernetes Service (AKS) and Kubernetes administration.
• Strong experience with Azure Functions, Azure Service Bus, Storage Accounts, App Services, Key Vault, API Management, and Azure networking services.
• Strong knowledge of cloud networking, security, scalability, availability, and enterprise architecture concepts.
• Strong expertise with Microsoft Entra ID and identity and access management, including RBAC, Managed Identities, Service Principals, Conditional Access, and PIM.
• Extensive experience administering and supporting GitHub Enterprise environments.
• Strong experience designing, developing, and maintaining CI/CD pipelines using GitHub Actions.
• Experience with reusable workflows, composite actions, GitHub Apps, OAuth integrations, webhooks, OIDC, and repository security controls.
• Experience provisioning, securing, scaling, and maintaining GitHub self-hosted runners.
• Strong experience administering Kubernetes environments and supporting containerized application workloads.
• Experience developing and maintaining Infrastructure as Code using Packer and ARM templates.
• Experience integrating CI/CD pipelines with Azure services and Kubernetes environments.
• Experience with PowerShell, Bash, Python, and automation scripting.
• Strong understanding of cloud security, DevSecOps, CI/CD practices, enterprise governance, and software supply chain security.
• Experience implementing monitoring, logging, alerting, and observability solutions in enterprise cloud environments.
• Strong analytical, troubleshooting, and problem-solving skills with the ability to resolve complex platform and application delivery issues.
• Strong written and verbal communication skills with the ability to document technical solutions and communicate effectively with technical and non-technical stakeholders.
• Ability to work independently, manage multiple technical priorities, and provide technical leadership across engineering teams.

Desired:

• Microsoft Azure Solutions Architect Expert certification.
• Microsoft Azure Administrator Associate certification.
• Microsoft Azure DevOps Engineer Expert certification.
• Certified Kubernetes Administrator (CKA) certification.
• GitHub Actions certification.
• Experience implementing GitOps-based deployment and configuration management models.
• Experience administering large-scale enterprise GitHub environments supporting multiple development teams.
• Experience with Azure Landing Zones and enterprise cloud governance frameworks.
• Experience supporting cloud security, regulatory compliance, and enterprise security programs.
• Experience supporting enterprise developer platforms, internal developer platforms, or engineering enablement programs.
• Experience with Azure DevOps integrations and developer self-service capabilities.
• Experience implementing modern platform engineering and SRE practices.
• Experience working within financial services, banking, insurance, healthcare, or another highly regulated enterprise environment.

BRMi will not sponsor applicants for work visas for this position.

This is a W2 opportunity only

EOE/Minorities/Females/Vet/Disabled

We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.