Senior Cloud Engineer

Aras Corporation; Andover (MA); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Aras Corporation is seeking a seniorCloud Infrastructure Engineer to own and enhance Azure cloud infrastructure, implement IaC, and lead IAM initiatives. You will work across commercial and sovereign cloud environments, ensuring governance, security, and cost optimization while mentoring engineers and guiding technical reviews.

The role emphasizes collaboration with infra, security, and operations teams, with a hybrid work model and in-office days on Wednesday and Thursday.

Qualifications

• 5+ years of hands-on experience designing, implementing, and supporting Microsoft Azure cloud environments.
• Experience in Azure Government or other sovereign cloud environments.
• Experience with Microsoft Entra ID, Okta, Active Directory, SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Infrastructure as Code using Terraform or Bicep in production environments.
• Advanced scripting and automation using PowerShell and Git-based CI/CD workflows.
• Deep understanding of Azure RBAC, Azure Policy, cloud governance, and core networking concepts.
• Proven ability to establish technical standards, lead design reviews, and influence engineering best practices.
• Experience supporting regulated, audited, or compliance-driven environments.
• Strong written and verbal communication skills with the ability to document and explain complex technical solutions.
• Interest in applying AI agents and assistants to operational workflows and automation.

Responsibilities

• Own and enhance Azure cloud infrastructure, governance, and platform standards across commercial and sovereign cloud environments.
• Design, implement, and automate cloud infrastructure using Infrastructure as Code (Terraform or Bicep), Azure DevOps, and PowerShell.
• Lead identity and access management initiatives across Microsoft Entra ID, Okta, Active Directory, Conditional Access, Privileged Identity Management (PIM), and Zero Trust frameworks.
• Manage certificate lifecycle, public key infrastructure (PKI), secrets management, and authentication strategies to ensure secure and reliable operations.
• Develop and maintain cloud governance, security, compliance, monitoring, and cost optimization practices, including support for CMMC and NIST requirements.
• Establish observability standards across Azure Monitor, Datadog, and Log Analytics, supporting platform reliability and incident response.
• Produce architecture documentation, design standards, and operational runbooks while mentoring engineers and leading technical reviews.
• Partner with infrastructure, networking, security, and operations teams on platform modernization, migration, business continuity, and operational excellence initiatives.

Skills

Azure cloud engineering

IAM governance

IaC

PowerShell

CI/CD

Cloud governance

Communication

AI automation interest

Tools

Terraform

Bicep

Azure DevOps

PowerShell

Datadog

Log Analytics

Microsoft Entra ID

Okta

Active Directory

Job description

Aras is a leading provider of digital thread solutions for product lifecycle management (PLM) and engineering AI. As one of the fastest growing PLM companies, our AI-native, low-code platform enables the rapid delivery of flexible solutions that connect teams across disciplines and functions to critical product data and agentic AI throughout the product lifecycle and extended value chain.

The world's largest manufacturers leverage Aras Innovator to manage complex product lifecycles, accelerate innovation, improve operational efficiency, and bring products to market faster. We collaborate with companies in some of the world's most innovative industries, including automotive, industrial equipment, aerospace and defense, high tech, and life sciences.

Key Responsibilities

• Own and enhance Azure cloud infrastructure, governance, and platform standards across commercial and sovereign cloud environments.
• Design, implement, and automate cloud infrastructure using Infrastructure as Code (Terraform or Bicep), Azure DevOps, and PowerShell.
• Lead identity and access management initiatives across Microsoft Entra ID, Okta, Active Directory, Conditional Access, Privileged Identity Management (PIM), and Zero Trust frameworks.
• Manage certificate lifecycle, public key infrastructure (PKI), secrets management, and authentication strategies to ensure secure and reliable operations.
• Develop and maintain cloud governance, security, compliance, monitoring, and cost optimization practices, including support for CMMC and NIST requirements.
• Establish observability standards across Azure Monitor, Datadog, and Log Analytics, supporting platform reliability and incident response.
• Produce architecture documentation, design standards, and operational runbooks while mentoring engineers and leading technical reviews.
• Partner with infrastructure, networking, security, and operations teams on platform modernization, migration, business continuity, and operational excellence initiatives.

Required Qualifications

• 5+ years of hands-on experience designing, implementing, and supporting Microsoft Azure cloud environments.
• Experience working in Azure Government, Microsoft 365 GCC High, or other sovereign cloud environments.
• Strong experience with Microsoft Entra ID, Okta, Active Directory, SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience implementing Infrastructure as Code using Terraform or Bicep in production environments.
• Advanced scripting and automation skills using PowerShell and Git-based CI/CD workflows.
• Deep understanding of Azure RBAC, Azure Policy, cloud governance, and core networking concepts.
• Proven ability to establish technical standards, lead design reviews, and influence engineering best practices.
• Experience supporting regulated, audited, or compliance-driven environments.
• Strong written and verbal communication skills with the ability to document and explain complex technical solutions.
• Interest in applying AI agents and assistants to operational workflows and automation.

Nice to Have

• Knowledge of CMMC, NIST 800-171, DFARS, or FedRAMP compliance requirements.
• Enterprise-scale Okta administration and identity governance experience.
• Experience with certificate lifecycle automation and PKI management.
• Familiarity with Datadog or comparable observability platforms.
• Experience with FinOps, cloud cost optimization, or cloud financial management.
• Python or Go development experience for automation and tooling.
• Relevant certifications such as AZ-305, AZ-500, SC-300, or Terraform Associate.

*This role is designated as hybrid with in-office days are Wednesday and Thursday

Aras was recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for PLM Software in Discrete Manufacturing Industries. Feedback from our community has also established Aras as a top-ranked PLM vendor in online review services like G2 and Gartner Peer Insights.

Compensation for the role will be commensurate with experience. The total expected base salary range will be between $120,000 - $140,000. This position is also bonus eligible.

• Flexible paid time off to recharge when you need it, plus company-paid holidays and a dedicated Global Wellness Day.

• 401(k) plan with company match to help you invest in your future.

• Robust health coverage, including generous medical, dental, and vision insurance with high premium contributions and deductible reimbursement.

• Company-paid life insurance, as well as short- and long-term disability coverage for added peace of mind.

Please visit our Privacy Notice and our California Consumer Privacy Act (CCPA)

Aras is an Equal Opportunity Employer.