Senior Cloud DevOps Network Engineer (FedRAMP)

OneStream Software; Birmingham (MI); On-site; USD 131,000 - 170,000; Full time

Benefits offered by this job

Excellent Medical Plan

Dental & Vision Insurance

Life Insurance

Short & Long Term Disability

Vacation Time

Paid Holidays

Professional Development

Retirement Plan

Job summary

OneStream Software is seeking a senior cloud infrastructure professional to design, implement, and secure Azure environments that meet FedRAMP High and IL4 requirements. You will lead IaC efforts using Terraform, ARM/Bicep, and YAML, while mentoring teammates and driving reliability across production systems.

The role requires deep cloud networking expertise, strong security controls knowledge, and experience with Agile tools like Jira.

Qualifications

• BS/BA in computer science, engineering, or technology-related field, or equivalent work experience.
• 8+ years of cloud infrastructure experience.
• 2+ years of compliance programs and security control sets such as NIST SP 800-53, FedRAMP High, and IL4, as applied to cloud SaaS, PaaS, and IaaS environments.
• Expert knowledge of networking and Azure services including VNets/vWAN, ExpressRoute, Azure Firewall, and security controls.

Responsibilities

• Lead design, monitoring, and security operations of Azure cloud solutions meeting FedRAMP High and IL4 requirements.
• Develop modular Infrastructure-as-Code using Terraform, PowerShell, ARM, Bicep, and YAML.
• Sustain high reliability for automated systems and mentor the team.

Skills

Azure cloud

FedRAMP High

Terraform

PowerShell

Bicep/ARM

IaC

Agile/Jira

Education

BS/BA in CS, Engineering, or related field

Tools

Git

Azure DevOps

Jira

Ansible

Puppet

Chef

Job description

At OneStream, we're on a mission to empower every Finance organization and professional to exceed their potential. Our global teams span continents, cultures, and time zones, united by a shared purpose as we build the operating system for modern Finance and help organizations move with greater speed, clarity, and confidence.

That mission comes to life through our people. Behind every innovation, customer success, and milestone are talented people working together to make a difference. That's why we're looking for people who are bold enough to think big, authentic in how they lead and collaborate, curious about what's possible, and committed to delivering results.

Summary

OneStream Software is a hyper-growth SaaS company focused on financial and operational data analytics for the largest companies in the world. We host our software on the Microsoft Azure cloud in many regions around the world using a variety of Azure technologies. This position focuses on the implementation of automations used to deliver, manage, and secure our cloud environments. If you enjoy staying at the forefront of technology and automating infrastructure deployments, then this is the job for you. This vital role within Cloud Services requires knowledge and experience designing, implementing, and monitoring scalable and secure cloud networking architecture in the FedRAMP space. The employee is expected to work well in a small team and be willing to share responsibilities with other team members as needed. The employee will interact with internal staff, managers, and customers to implement and maintain IT operations. A passion for technology and learning, and the ability to grow others are vital for success in this role.

Primary Duties and Responsibilities

• Lead the design, continuous monitoring, implementation, and security operations of Azure cloud solutions, ensuring they meet industry best practices and comply with FedRAMP High and IL4 requirements.
• Lead team in developing modular Infrastructure-as-Code utilizing Terraform, PowerShell, ARM, Bicep, and YAML languages.
• Lead projects of moderate complexity to completion.
• Sustain a high level of reliability for key automated systems.
• Lead teams to define, estimate, and implement requirements for new automations or services of moderate complexity needing development.
• Stay up to date with the latest Azure and FedRAMP regulatory changes and industry trends, advising teams on potential impacts and necessary adjustments.
• Update technical documentation, workflows, and knowledge base articles.
• Provide feedback in pull requests and peer coding reviews.
• Solid knowledge in focused areas of OneStream Software.
• Participate in On-Call rotation to support production systems.
• Assist in efforts to debug the problems which arise in production.
• Ability to mentor others in several technical areas.
• Understanding practical use of FedRAMP/SOC controls to assist Compliance and Security teams.

Required Education and Experience

• BS/BA in computer science, engineering, or technology-related field, or equivalent work experience.
• 8+ years of cloud infrastructure experience.
• 2+ years of compliance programs and security control sets such as NIST SP 800-53, FedRAMP High, and IL4, as applied to cloud SaaS, PaaS, and IaaS environments.
• Expert knowledge of:
  • VNets/vWAN, subnets, UDRs, routing, peering
  • ExpressRoute, VPN Gateway, Private Link/Endpoint
  • Azure Firewall, NSG/ASG, WAF, Application Gateway, Web Application Firewalls
• Hands‑on experience implementing network design and firewall configurations, as it pertains to connecting to government networks (BCAP) utilizing Azure Firewall and/or Palo Alto.
• Hands‑on experience implementing IPv6 routing and strict egress filtering strategies.
• Ability to translate DISA STIGs and NIST controls into enforceable network guardrails and evidence artifacts.
• Advanced understanding of Infrastructure-as-Code concepts and tooling, including Terraform, CloudFormation templates, Bicep, or ARM templates, on Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Deep knowledge of Configuration Management/Orchestration utilities such as Ansible, PowerShell DSC, Chef, and Puppet.
• Advanced understanding of cloud concepts including elasticity, security, and identity management.
• Well‑versed familiarity with Agile Development methodologies utilizing Jira or Azure DevOps Boards.
• Strong understanding of Azure Kubernetes Services (AKS) with container‑based deployment skills or other platforms such as OpenShift, GKS, and EKS.
• Proficient knowledge in Software Development Lifecycles.
• 8+ years of hands‑on experience with the following technologies, tools, and concepts:
  • Automating processes using PowerShell, Bash, CLI, REST APIs, python, ARM Templates or other scripting languages.
  • Comfortable leveraging source control tools such as Git, BitBucket, or GitHub.
  • Microsoft Azure, Amazon Web Services (AWS) or Google Cloud (GCP).
  • Microsoft Windows 11, Windows Server, IIS, Microsoft SQL Server, Active Directory.

Preferred Education and Experience

• Experience working for a cloud service provider (CSP), managed service provider (MSP), or SaaS provider.
• 8+ years of relevant Azure experience deploying and managing while leveraging Infrastructure-as-Code (IAC) concepts.
• Microsoft Windows Server 2016-2022, IIS, Microsoft SQL Server, and Azure Active Directory.
• Debian, Ubuntu, or other flavors of the Linux operating systems.
• Any certifications such as Microsoft Certified: Azure Administrator Associate (AZ-103, AZ-104), Azure Solutions Architect Expert (AZ-300, AZ-301), CCNP, CCIE, CISSP, Azure DevOps Engineer Expert (AZ-400), Certified Kubernetes Administrator (CKE), Information Technology Infrastructure Library (ITIL) Foundation, Microsoft Certified Professional (MCP), or CompTIA Security+/Network+ are a plus.

Knowledge, Skills, and Abilities

• Deal well with ambiguous or undefined problems.
• Ability to self‑motivate and work independently.
• Strong organizational and prioritization skills.
• Ability to find and apply effective solutions to emerging problems and challenges.
• Strong attention to detail.
• Ability to estimate your efforts.
• Ability to get up to speed quickly with modern technologies and services.
• Work well in a fast‑paced environment.
• Ability to multitask on a variety of projects.
• Comfortable communicating with all levels of management.
• Experience with OneStream Software not required.

Supervisory Responsibilities

This position has no supervisory responsibilities.

Travel

Travel Requirement: Travel is not expected to exceed 5%.

Work Authorization and Security Clearance

Employee must be legally authorized to work in the country of the job position as a precondition of employment.

Benefits at OneStream

OneStream employees are passionate, hardworking individuals who go above and beyond to keep our customers happy and follow through on our mission statement. They consistently deliver the best and in turn, we make every effort to keep them cared for and happy. A sample of the benefits we provide are:

• Excellent Medical Plan
• Dental & Vision Insurance
• Life Insurance
• Short & Long Term Disability
• Vacation Time
• Paid Holidays
• Professional Development
• Retirement Plan

Total compensation is based on experience, skills, and location using objective, job‑related criteria. Additional variable compensation and benefits may apply.

Gross annual base salary

$131,000 — $170,000 USD

All candidates must be legally authorized to work for any company in the country where this position is located without sponsorship.

OneStream Software is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race,color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable local laws, regulations, and ordinances.

If you needassistanceand/or a reasonable accommodation during the application process, reach out to [e-mail].

OneStream may use the personal information you provide to process your application and contact you,in accordance withapplicable privacy laws such as the CCPA and GDPR. For more information about how we handle your personal information, please review OneStream's Privacy Policy.

Emails about job opportunities at OneStream are only sent by employees with an @onestreamsoftware.com email address. Reach out to your contact at OneStream if you suspect a phishingscam.