Senior Azure Cloud Networking Engineer - FedRAMP & IaC

OneStream Software; United States; On-site; USD 131,000 - 170,000; Full time

Benefits offered by this job

Excellent Medical Plan

Dental & Vision Insurance

Life Insurance

Disability Insurance

Vacation Time

Paid Holidays

Professional Development

Retirement Plan

Job summary

OneStream Software is seeking an experienced Cloud Engineer to design, implement, and monitor scalable Azure cloud solutions in a FedRAMP High/IL4 compliant environment. You will lead modular Infrastructure-as-Code development using Terraform, Bicep, ARM, and YAML, mentor teammates, and ensure high reliability of automated systems.

You will stay current with Azure and FedRAMP changes, collaborate with Compliance and Security teams, and contribute to documentation and operational excellence

Qualifications

• BS/BA in computer science, engineering, or technology-related field, or equivalent work experience.
• 8+ years of cloud infrastructure experience.
• 2+ years of compliance programs and security control sets such as NIST SP 800-53, FedRAMP High, and IL4, as applied to cloud SaaS, PaaS, and IaaS environments.
• Deep knowledge of VNets/vWAN, subnets, UDRs, routing, peering.
• ExpressRoute, VPN Gateway, Private Link/Endpoint.
• Azure Firewall, NSG/ASG, WAF, Application Gateway, Web Application Firewalls.
• Hands-on experience implementing network design and firewall configurations (BCAP) with Azure Firewall and/or Palo Alto.
• IPv6 routing and strict egress filtering strategies.
• Translate DISA STIGs and NIST controls into enforceable guardrails and evidence artifacts.
• IaC concepts and tooling (Terraform, CloudFormation, Bicep, ARM) on Azure/AWS/GCP.
• Ansible, PowerShell DSC, Chef, Puppet.
• Cloud concepts including elasticity, security, identity management.
• Agile Development with Jira or Azure DevOps Boards.
• AKS or similar container platforms (OpenShift, GKS, EKS).
• Software Development Lifecycle knowledge.
• 8+ years with automation using PowerShell, Bash, CLI, REST APIs, Python, ARM Templates.
• Git, BitBucket, or GitHub as source control.
• Azure/AWS/GCP experience; Windows Server, IIS, SQL Server, Active Directory.

Responsibilities

• Lead design, monitoring, implementation, and security operations of Azure cloud solutions for FedRAMP High/IL4 compliance.
• Develop modular Infrastructure-as-Code using Terraform, PowerShell, ARM, Bicep, and YAML.
• Lead projects of moderate complexity to completion.
• Maintain high reliability of automated systems.
• Mentor teams in various technical areas and define requirements for new automations.
• Stay updated on Azure and FedRAMP changes; advise on impacts.
• Update technical docs, workflows, and knowledge base articles.
• Participate in on-call rotation to support production systems.
• Contribute to production debugging efforts.
• Understand and apply FedRAMP/SOC controls for compliance teams.

Skills

Azure networking

Infrastructure as Code

Security compliance

Cloud concepts

Education

BS/BA in CS or related field

Tools

Terraform

Bicep

ARM templates

Ansible

PowerShell

Job description

OneStream Software is seeking an experienced Cloud Engineer to design, implement, and monitor scalable Azure cloud solutions in a FedRAMP High/IL4 compliant environment. You will lead modular Infrastructure-as-Code development using Terraform, Bicep, ARM, and YAML, mentor teammates, and ensure high reliability of automated systems.

You will stay current with Azure and FedRAMP changes, collaborate with Compliance and Security teams, and contribute to documentation and operational excellence