Senior Cloud Engineer

Devopsroles; Andover (MN); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Flexible paid time off

Job summary

Aras is seeking an experienced Cloud Infrastructure Engineer to shape Azure platforms, governance, and automation. You will implement IaC with Terraform/Bicep, manage IAM across Entra/Okta, and drive security, compliance, and cost optimization in hybrid cloud environments.

You will mentor engineers, document architectures, and collaborate with cross-functional teams to modernize platforms and ensure reliable operations.

Qualifications

• 5+ years of hands-on Azure cloud design and support.
• Experience in sovereign/cloud gov environments (Azure Government, GCC High).
• Strong knowledge of Entra ID, Okta, AD, SAML, OAuth, OIDC, SCIM.
• IaC using Terraform or Bicep in production environments.
• Advanced PowerShell scripting and Git-based CI/CD workflows.
• Deep understanding of Azure RBAC, Policy, governance and networking.
• Proven ability to establish standards and lead reviews in engineering.
• Experience in regulated/compliance-driven environments.
• Strong written and verbal communication; able to document complex solutions.
• Interest in applying AI agents to automation workflows.

Responsibilities

• Own and enhance Azure cloud infrastructure, governance, and platform standards.
• Design, implement, and automate cloud infra using IaC, Azure DevOps, and PowerShell.
• Lead identity management across Entra ID, Okta, AD, and CA/ PIM.
• Manage certificate lifecycle, PKI, secrets, and authentication strategies.
• Develop cloud governance, security, and compliance practices (CMMC/NIST).
• Establish observability standards with Azure Monitor, Datadog, and Log Analytics.
• Produce architecture docs, standards, and runbooks; mentor engineers.
• Collaborate with infra, networking, security, and ops on platform modernization.

Skills

Azure cloud

Terraform

PowerShell

Azure DevOps

IAM (Entra/Okta)

SAML/OIDC

Azure RBAC

Documentation

Tools

Datadog

Okta

Azure Monitor

Log Analytics

Job description

Aras is a leading provider of digital thread solutions for product lifecycle management (PLM) and engineering AI. As one of the fastest growing PLM companies, our AI-native, low-code platform enables the rapid delivery of flexible solutions that connect teams across disciplines and functions to critical product data and agentic AI throughout the product lifecycle and extended value chain.

The world's largest manufacturers leverage Aras Innovator to manage complex product lifecycles, accelerate innovation, improve operational efficiency, and bring products to market faster. We collaborate with companies in some of the world's most innovative industries, including automotive, industrial equipment, aerospace and defense, high tech, and life sciences.

Key Responsibilities

• Own and enhance Azure cloud infrastructure, governance, and platform standards across commercial and sovereign cloud environments.
• Design, implement, and automate cloud infrastructure using Infrastructure as Code (Terraform or Bicep), Azure DevOps, and PowerShell.
• Lead identity and access management initiatives across Microsoft Entra ID, Okta, Active Directory, Conditional Access, Privileged Identity Management (PIM), and Zero Trust frameworks.
• Manage certificate lifecycle, public key infrastructure (PKI), secrets management, and authentication strategies to ensure secure and reliable operations.
• Develop and maintain cloud governance, security, compliance, monitoring, and cost optimization practices, including support for CMMC and NIST requirements.
• Establish observability standards across Azure Monitor, Datadog, and Log Analytics, supporting platform reliability and incident response.
• Produce architecture documentation, design standards, and operational runbooks while mentoring engineers and leading technical reviews.
• Partner with infrastructure, networking, security, and operations teams on platform modernization, migration, business continuity, and operational excellence initiatives.

Required Qualifications

• 5+ years of hands-on experience designing, implementing, and supporting Microsoft Azure cloud environments.
• Experience working in Azure Government, Microsoft 365 GCC High, or other sovereign cloud environments.
• Strong experience with Microsoft Entra ID, Okta, Active Directory, SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience implementing Infrastructure as Code using Terraform or Bicep in production environments.
• Advanced scripting and automation skills using PowerShell and Git-based CI/CD workflows.
• Deep understanding of Azure RBAC, Azure Policy, cloud governance, and core networking concepts.
• Proven ability to establish technical standards, lead design reviews, and influence engineering best practices.
• Experience supporting regulated, audited, or compliance-driven environments.
• Strong written and verbal communication skills with the ability to document and explain complex technical solutions.
• Interest in applying AI agents and assistants to operational workflows and automation.

Nice to Have

• Knowledge of CMMC, NIST 800-171, DFARS, or FedRAMP compliance requirements.
• Enterprise-scale Okta administration and identity governance experience.
• Experience with certificate lifecycle automation and PKI management.
• Familiarity with Datadog or comparable observability platforms.
• Experience with FinOps, cloud cost optimization, or cloud financial management.
• Python or Go development experience for automation and tooling.
• Relevant certifications such as AZ-305, AZ-500, SC-300, or Terraform Associate.

*This role is designated as hybrid with in-office days are Wednesday and Thursday

Aras was recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for PLM Software in Discrete Manufacturing Industries. Feedback from our community has also established Aras as a top-ranked PLM vendor in online review services like G2 and Gartner Peer Insights.

With over 700 employees in 11 countries, we’re looking to add to our incredible team.

Compensation for the role will be commensurate with experience. The total expected base salary range will be between $120,000 - $140,000. This position is also bonus eligible.

• Flexible paid time offto recharge when you need it, plus company-paid holidays and a dedicatedGlobal Wellness Day.
  

• A401(k) plan with company matchto help you invest in your future.
  

• Robust health coverage, including generous medical, dental, and vision insurance with high premium contributions and deductible reimbursement.
  

• Company-paid life insurance, as well asshort- and long-term disability coveragefor added peace of mind.
  

Please visit our Privacy Notice and our California Consumer Privacy Act (CCPA)

Aras is an Equal Opportunity Employer.