Senior Azure Cloud & GitHub Platform Engineer (Hybrid)

BRMi; Vienna (VA); Hybrid; USD 120,000 - 166,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Employer-Paid Life Insurance

Disability Insurance

401(k)

PTO with Holidays

Educational Assistance

Job summary

BRMi in Vienna, VA is seeking a Senior Azure Cloud & GitHub Platform Engineer to design, implement, secure, and support enterprise cloud and developer platforms. You will lead hands-on engineering across Azure, AKS, IAM, GitHub Enterprise, and CI/CD pipelines.

The role emphasizes automation, IaC with Packer and ARM templates, platform observability, and secure deployment strategies. This hybrid position requires in-person interviews in the Vienna area.

Qualifications

• Bachelor's degree in a related technical field.
• 7+ years in Cloud/Platform/DevOps engineering or similar.
• 5+ years hands-on Azure experience with AKS and related services.
• Extensive experience with GitHub Enterprise and CI/CD pipelines.
• Strong scripting and IaC skills (PowerShell, Python, Bash; Packer, ARM templates).
• Ability to lead and communicate with technical and non-technical stakeholders.

Responsibilities

• Design, implement, administer, and support Azure cloud platforms.
• Deploy and maintain AKS, Key Vault, API Management, and monitoring.
• Design secure, scalable cloud architectures for enterprise needs.
• Develop and automate infrastructure with IaC (Packer, ARM).
• Build and optimize CI/CD pipelines using GitHub Actions.
• Establish DevSecOps controls and security in delivery lifecycle.
• Support GitHub Enterprise environments and governance.
• Troubleshoot complex platform issues and mentor teams.

Skills

Azure

AKS

Identity & IAM

GitHub Enterprise

CI/CD pipelines

Infrastructure as Code

PowerShell

Python

Bash

Education

Bachelor's degree in Computer Science or related field

Tools

Packer

ARM templates

GitHub Actions

Prometheus

Grafana

Job description

Overview

The Senior Azure Cloud & GitHub Platform Engineer will design, implement, secure, automate, and support enterprise cloud and developer platforms supporting modern application delivery. This role will provide hands-on engineering and technical leadership across Microsoft Azure, Azure Kubernetes Service (AKS), identity and access management, GitHub Enterprise, CI/CD pipelines, infrastructure automation, and platform observability.

Benefits

• Comprehensive Medical, Dental, and Vision Insurance
• Employer-Paid Life Insurance
• Employer-Paid Short-Term and Long-Term Disability Insurance
• 401(k)
• Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays
• Educational Assistance

Salary: $120-166K

• Hybrid in Vienna, VA**
• An In Person interview will be required for this role prior to offer.**

Responsibilities

• Design, implement, administer, and support Microsoft Azure cloud platforms and enterprise application workloads.
• Deploy, configure, and maintain Azure services including Azure Kubernetes Service (AKS), Azure Service Bus, Storage Accounts, Azure Functions, App Services, Key Vault, API Management, Azure Monitor, Log Analytics, and Azure networking services.
• Design highly available, resilient, scalable, and secure cloud-native architectures that support enterprise application requirements.
• Provision, administer, upgrade, patch, secure, and optimize AKS clusters and associated Kubernetes workloads.
• Manage Kubernetes capabilities including ingress controllers, autoscaling, networking, workload security, monitoring, and observability.
• Implement and administer identity and access management solutions using Microsoft Entra ID, Role-Based Access Control (RBAC), Managed Identities, Service Principals, Conditional Access, and Privileged Identity Management (PIM).
• Establish and maintain least-privilege access models and cloud governance standards across Azure environments.
• Administer and automate GitHub Enterprise environments, including organizations, teams, repositories, repository rulesets, branch protection policies, security policies, secrets, and enterprise governance controls.
• Configure and support GitHub Apps, OAuth integrations, webhooks, enterprise authentication, and other GitHub platform integrations.
• Design, develop, and maintain CI/CD pipelines using GitHub Actions, reusable workflows, composite actions, and enterprise integrations.
• Provision, secure, scale, upgrade, and maintain GitHub-hosted and self-hosted runners.
• Implement secure workload authentication using OpenID Connect (OIDC), Managed Identities, federated credentials, and secretless authentication patterns.
• Develop and maintain Infrastructure as Code solutions using Packer and ARM templates to automate and standardize cloud infrastructure deployments.
• Integrate CI/CD pipelines with Azure cloud services, Kubernetes environments, security controls, and application deployment processes.
• Implement and support deployment strategies including blue-green deployments, canary releases, and rolling updates.
• Establish DevSecOps controls, automated quality gates, and security checks throughout the software delivery lifecycle.
• Support software supply chain security, dependency management, vulnerability remediation, and applicable compliance requirements.
• Implement and maintain monitoring, logging, alerting, and observability capabilities using Azure Monitor, Log Analytics, Application Insights, Prometheus, and Grafana.
• Troubleshoot complex issues involving Azure infrastructure, Kubernetes, identity, networking, GitHub, CI/CD pipelines, and application deployments.
• Develop automation using PowerShell, Bash, Python, and other scripting technologies to improve platform reliability and reduce manual administration.
• Create and maintain operational runbooks, architecture documentation, engineering standards, deployment procedures, and platform best practices.
• Partner with application development teams to improve platform reliability, deployment velocity, security, and developer experience.
• Provide technical guidance and leadership across engineering teams on cloud, Kubernetes, GitHub, automation, and DevSecOps practices.
• Support production incidents, root-cause analysis, problem resolution, and continuous improvement initiatives.
• Perform other duties as required.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Software Engineering, Engineering, or a related technical field.
• 7+ years of experience in Cloud Engineering, Platform Engineering, DevOps Engineering, Site Reliability Engineering (SRE), or a related technical discipline.
• 5+ years of hands-on experience designing, implementing, or supporting Microsoft Azure environments.
• Strong hands-on experience with Azure Kubernetes Service (AKS) and Kubernetes administration.
• Strong experience with Azure Functions, Azure Service Bus, Storage Accounts, App Services, Key Vault, API Management, and Azure networking services.
• Strong knowledge of cloud networking, security, scalability, availability, and enterprise architecture concepts.
• Strong expertise with Microsoft Entra ID and identity and access management, including RBAC, Managed Identities, Service Principals, Conditional Access, and PIM.
• Extensive experience administering and supporting GitHub Enterprise environments.
• Strong experience designing, developing, and maintaining CI/CD pipelines using GitHub Actions.
• Experience with reusable workflows, composite actions, GitHub Apps, OAuth integrations, webhooks, OIDC, and repository security controls.
• Experience provisioning, securing, scaling, and maintaining GitHub self-hosted runners.
• Strong experience administering Kubernetes environments and supporting containerized application workloads.
• Experience developing and maintaining Infrastructure as Code using Packer and ARM templates.
• Experience integrating CI/CD pipelines with Azure services and Kubernetes environments.
• Experience with PowerShell, Bash, Python, and automation scripting.
• Strong understanding of cloud security, DevSecOps, CI/CD practices, enterprise governance, and software supply chain security.
• Experience implementing monitoring, logging, alerting, and observability solutions in enterprise cloud environments.
• Strong analytical, troubleshooting, and problem-solving skills with the ability to resolve complex platform and application delivery issues.
• Strong written and verbal communication skills with the ability to document technical solutions and communicate effectively with technical and non-technical stakeholders.
• Ability to work independently, manage multiple technical priorities, and provide technical leadership across engineering teams.

Desired

• Microsoft Azure Solutions Architect Expert certification.
• Microsoft Azure Administrator Associate certification.
• Microsoft Azure DevOps Engineer Expert certification.
• Certified Kubernetes Administrator (CKA) certification.
• GitHub Actions certification.
• Experience implementing GitOps-based deployment and configuration management models.
• Experience administering large-scale enterprise GitHub environments supporting multiple development teams.
• Experience with Azure Landing Zones and enterprise cloud governance frameworks.
• Experience supporting cloud security, regulatory compliance, and enterprise security programs.
• Experience supporting enterprise developer platforms, internal developer platforms, or engineering enablement programs.
• Experience with Azure DevOps integrations and developer self-service capabilities.
• Experience implementing modern platform engineering and SRE practices.
• Experience working within financial services, banking, insurance, healthcare, or another highly regulated enterprise environment.
• BRMi will not sponsor applicants for work visas for this position.**
• This is a W2 opportunity only**

EOE/Minorities/Females/Vet/Disabled

We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.