Senior Cloud DevOps Network Engineer (FedRAMP, Azure, Advanced Networking)

Work at OneStream; United States; Remote; USD 140,000 - 172,000; Full time

Benefits offered by this job

Vision insurance

Medical insurance

Life insurance

Dental insurance

401K

Job summary

OneStream Software is a hyper-growth SaaS company delivering financial and operational analytics. The Senior Cloud DevOps Network Engineer will implement automation to deliver, manage, and secure cloud environments in FedRAMP High space.

The role requires designing, implementing, and monitoring scalable cloud networking, mentoring teammates, and staying current with Azure and regulatory changes. Remote work in the USA is supported, with on-call duties and potential travel as needed.

Qualifications

• BS/BA in CS, engineering, or related field.
• 8+ years of cloud infrastructure experience.
• 2+ years in compliance programs (NIST SP 800-53, FedRAMP High, IL4) for cloud SaaS/PaaS/IaaS.
• Expert knowledge: VNet/vWAN, subnets, UDRs, routing, peering.
• Expert knowledge: ExpressRoute, VPN Gateway, Private Link/Endpoint.
• Expert knowledge: Azure Firewall, NSG/ASG, WAF, App Gateway.
• Hands-on with network design for government connectivity (BCAP) using Azure Firewall or Palo Alto.
• IPv6 routing and strict egress filtering.
• Translate DISA STIGs and NIST controls into guardrails and evidence artifacts.
• IaC concepts/tools (Terraform, CloudFormation, Bicep/ARM) on Azure/AWS/GCP.
• Knowledge of Ansible, PowerShell DSC, Chef, Puppet.
• Cloud concepts incl security/identity.
• Agile practices with Jira or Azure DevOps Boards.
• AKS and container deployments (OpenShift/GKE/EKS).
• 8+ years with scripting (PowerShell, Bash, CLI, REST, Python), Git/GitHub/etc., and multiple cloud platforms.

Responsibilities

• Lead design, monitoring, implementation, and security ops of Azure cloud solutions per FedRAMP High/IL4.
• Develop modular IaC using Terraform, PowerShell, ARM, Bicep, YAML.
• Lead projects of moderate complexity to completion.
• Maintain high reliability of automated systems.
• Mentor others in technical areas.
• Stay updated on Azure and FedRAMP changes and advise teams.
• Update documentation and knowledge bases.
• Contribute to pull requests and code reviews.
• Support production in on-call rotations.
• Understand OneStream-specific aspects as needed.

Skills

VNet/vWAN

subnets

UDRs

routing

peering

ExpressRoute

VPN Gateway

Private Link

Azure Firewall

NSG/ASG

WAF

App Gateway

Terraform

PowerShell

ARM

Bicep

YAML

Ansible

Chef

Puppet

AKS

Jira

Azure DevOps

Git

GitHub

Bitbucket

Python

Bash

Windows Server

SQL Server

Active Directory

Azure

AWS

GCP

OpenShift

GKE

EKS

Education

BS/BA in Computer Science

Tools

Terraform

PowerShell

ARM Templates

Bicep

YAML

Ansible

Puppet

Chef

Job description

Senior Cloud DevOps Network Engineer (FedRAMP, Azure, Advanced Networking)

Location: Remote, USA

Employment Type: Full-Time

Benefits Offered: Vision, Medical, Life, Dental, 401K

Gross Annual Base Salary: USD 140,000 - 172,250

Additional variable compensation and benefits may apply. Total compensation is based on experience, skills, and location using objective, job-related criteria.

Summary

OneStream Software is a hyper-growth SaaS company focused on financial and operational data analytics for the largest companies in the world.We host our software on the Microsoft Azure cloud in many regions around the world using a variety of Azure technologies.This position focuses on the implementation of automations used to deliver, manage, and secure our cloud environments. Ideal for those staying at the forefront of technology and automating infrastructure deployments. This vital role within Cloud Services requires knowledge and experience designing, implementing, and monitoring scalable and secure cloud networking architecture in the FedRAMP space. The employee is expected to work well in a small team and willing to share responsibilities with other team members as needed. He or she will interact with internal staff, managers, and customers to implement and maintain IT operations. A passion for technology and learning, and the ability to grow others are vital for success in this role.

Primary Duties and Responsibilities

• Lead the design, continuous monitoring, implementation, and security operations of Azure cloud solutions, ensuring they meet industry best practices and comply with FedRAMP High, IL4 requirements.
• Lead team in developing modular Infrastructure-as-Code utilizing Terraform, PowerShell, ARM, Bicep, and YAML languages.
• Lead projects of moderate complexity to completion.
• Sustain a high level of reliability for key automated systems.
• Leads teams to define, estimate, and implement requirements for new automations or services of moderate complexity needing development.
• Stay up to date with the latest Azure and FedRAMP regulatory changes and industry trends, advising teams on potential impacts and necessary adjustments.
• Update technical documentation, workflows, and knowledge base articles.
• Provide feedback in pull requests and peer coding reviews.
• Solid knowledge in focused areas of OneStream Software.
• Participate in on-call rotation to support production systems.
• Assist in efforts to debug the problems which arise in production.
• Ability to mentor others in several technical areas.
• Understanding practical use of FedRAMP/SOC controls to assist Compliance and Security teams.
  

Required Education and Experience

• BS/BA in computer science, engineering, or technology-related field (or equivalent work experience).
• 8+ years of cloud infrastructure experience.
• 2+ years of compliance programs and security control sets such as NIST SP 800-53, FedRAMP High, IL4, as applied to cloud SaaS, PaaS, and IaaS environments.
• Expert knowledge of:
  • VNets/vWAN, subnets, UDRs, routing, peering.
  • ExpressRoute, VPN Gateway, Private Link/Endpoint.
  • Azure Firewall, NSG/ASG, WAF, Application Gateway, Web Application Firewalls.
• Hands-on experience implementing network design and firewall configurations, as it pertains to connecting to government networks (BCAP) utilizing Azure Firewall and/or Palo Alto.
• Hands on experience implementing IPv6 routing and strict egress filtering strategies.
• Ability to translate DISA STIGs and NIST controls into enforceable network guardrails and evidence artifacts.
• Advanced understanding of Infrastructure-As-Code concepts and tooling (Terraform, CloudFormation templates, Bicep or ARM templates) on Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Deep knowledge of Configuration Management/Orchestration utilities such as Ansible, PowerShell DSC, Chef, and Puppet.
• Advanced understanding of cloud concepts including elasticity, security, and identity management.
• Well versed familiarity with Agile Development methodologies utilizing Jira or Azure DevOps Boards.
• Strong understanding of Azure Kubernetes Services (AKS) with container-based deployment skills or other platforms such as OpenShift, GKS, EKS.
• Proficient knowledge in Software Development Lifecycles.
• 8+ years of hands-on experience with the following technologies, tools, and concepts:
  • Automating processes using PowerShell, Bash, CLI, REST APIs, python, ARM Templates or other scripting languages.
  • Comfortable leveraging source control tools such as Git, BitBucket, or GitHub.
  • Microsoft Azure, Amazon Web Services (AWS) or Google Cloud (GCP).
  • Microsoft Windows 11, Windows Server, IIS, Microsoft SQL Server, Active Directory.

Preferred Education and Experience

• Experience working for a cloud service provider (CSP), managed service provider (MSP), or SaaS provider.
• 8+ years of relevant Azure experience deploying and managing leveraging Infrastructure-as-Code (IAC) concepts.
• Microsoft Windows Server 2016-2022, IIS, Microsoft SQL Server, Azure Active Directory.
• Debian, Ubuntu, or other flavors of the Linux operating systems.
• Any certifications such as Microsoft Certified: Azure Administrator Associate (AZ-103, AZ-104), Azure Solutions Architect Expert (AZ-300, AZ-301), CCNP, CCIE, CISSP, Azure DevOps Engineer Expert (AZ-400), Certified Kubernetes Administrator (CKE), CISSP, Information Technology Infrastructure Library (ITIL) Foundation, Microsoft Certified Professional (MCP), CompTIA Security+/Network+ is a plus.

Knowledge, Skills, and Abilities

• Deal well with ambiguous/undefined problems.
• Ability to self-motivate and work independently.
• Strong organizational and prioritization skills.
• Ability to find and apply effective solutions to emerging problems and challenges.
• Strong attention to detail.
• Ability to estimate your efforts.
• Ability to get up to speed quickly with modern technologies and services.
• Work well in a fast-paced environment.
• Ability to multitask on a variety of projects.
• Comfortable communicating with all levels of management.
• Experience with OneStream Software not required.

Travel (remove if not applicable)

• Regular travel is not expected.

Who We Are

OneStream is how today’s Finance teams can go beyond just reporting on the past and Take Finance Further by steering the business to the future. It’s the only enterprise finance platform that unifies financial and operational data, embeds AI for better decisions and productivity, and empowers the CFO to become a critical driver of business strategy and execution. Our vision is to be the AI operating system for modern finance, digitizing core financial functions and empowering the CFO to become a critical driver of business strategy. To learn more visit www.onestream.com.

Why Join The OneStream Team

• Transparency around corporate structure, salary, and benefits.
• Core value of customer success.
• Variety of project work (not industry-specific).
• Strong culture and camaraderie.
• Multiple training opportunities.

Benefits at OneStream

OneStream employees are passionate, hardworking individuals who go above and beyond to keep our customers happy and follow through on our mission statement. They consistently deliver the best and in turn, we make every effort to keep them cared for and happy. A sample of the benefits we provide are:

• Excellent Medical Plan.
• Dental & Vision Insurance.
• Life Insurance.
• Short & Long Term Disability.
• Vacation Time.
• Paid Holidays.
• Professional Development.
• Retirement Plan.

All candidates must be legally authorized to work for any company in the country where this position is located without sponsorship.

OneStream is an Equal Opportunity Employer.