Senior Cloud Engineer: Azure, IAM & Compliance

Aras Corporation

Andover (MA)

Hybrid

USD 120,000 - 140,000

Full time

9 days ago

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Hybrid work model

Job summary

Aras Corporation is seeking a seniorCloud Infrastructure Engineer to own and enhance Azure cloud infrastructure, implement IaC, and lead IAM initiatives. You will work across commercial and sovereign cloud environments, ensuring governance, security, and cost optimization while mentoring engineers and guiding technical reviews.

The role emphasizes collaboration with infra, security, and operations teams, with a hybrid work model and in-office days on Wednesday and Thursday.

Qualifications

5+ years of hands-on experience designing, implementing, and supporting Microsoft Azure cloud environments.
Experience in Azure Government or other sovereign cloud environments.
Experience with Microsoft Entra ID, Okta, Active Directory, SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
Infrastructure as Code using Terraform or Bicep in production environments.
Advanced scripting and automation using PowerShell and Git-based CI/CD workflows.
Deep understanding of Azure RBAC, Azure Policy, cloud governance, and core networking concepts.
Proven ability to establish technical standards, lead design reviews, and influence engineering best practices.
Experience supporting regulated, audited, or compliance-driven environments.
Strong written and verbal communication skills with the ability to document and explain complex technical solutions.
Interest in applying AI agents and assistants to operational workflows and automation.

Responsibilities

Own and enhance Azure cloud infrastructure, governance, and platform standards across commercial and sovereign cloud environments.
Design, implement, and automate cloud infrastructure using Infrastructure as Code (Terraform or Bicep), Azure DevOps, and PowerShell.
Lead identity and access management initiatives across Microsoft Entra ID, Okta, Active Directory, Conditional Access, Privileged Identity Management (PIM), and Zero Trust frameworks.
Manage certificate lifecycle, public key infrastructure (PKI), secrets management, and authentication strategies to ensure secure and reliable operations.
Develop and maintain cloud governance, security, compliance, monitoring, and cost optimization practices, including support for CMMC and NIST requirements.
Establish observability standards across Azure Monitor, Datadog, and Log Analytics, supporting platform reliability and incident response.
Produce architecture documentation, design standards, and operational runbooks while mentoring engineers and leading technical reviews.
Partner with infrastructure, networking, security, and operations teams on platform modernization, migration, business continuity, and operational excellence initiatives.