Senior Platform Engineer Cloud Devops Identity

Key Skills: Cloud Platform Engineer/Cloud Engineer/SRE/Site Reliability Engineer, AKS (Azure Kubernetes Services), Azure, Clusters, Terraform, AWS, Github

Description:

Position Overview

Our client is seeking experienced, hands-on Platform Engineers for a six-month engagement focused on delivering enterprise cloud, identity, DevOps, automation, and container platform capabilities.

This is a delivery-focused opportunity for engineers who can quickly integrate into an established enterprise environment, independently own significant technical workstreams, and move seamlessly between architecture, engineering, automation, and production implementation.

You will work across Microsoft Azure and AWS, building and operating Azure Kubernetes Service (AKS) environments, evolving identity and access management, strengthening GitHub Enterprise and CI/CD capabilities, and modernizing infrastructure as code by migrating existing Bicep deployments to Terraform.

You will collaborate with application owners, infrastructure, Operations, Information Security, AI, and data teams to bring new and existing workloads into secure, scalable, production-ready environments.

The engagement is expected to last six months, with strong performers potentially considered for permanent employment based on business needs and approval. Conversion is not guaranteed.

Key Responsibilities

1. Cloud Platform Engineering & Architecture

• Design, build, and enhance secure, scalable cloud infrastructure across Microsoft Azure and AWS, including networking, compute, storage, managed services, secrets management, policy, and monitoring.
• Engineer and automate cloud services including AKS, Azure Data Factory, Azure Virtual Desktop, and supporting infrastructure.
• Establish reusable reference architectures and engineering standards that support application, data, and end-user computing workloads.
• Evaluate and implement solutions that improve platform availability, resiliency, performance, security, and cost efficiency.

2. Kubernetes & AKS Engineering

• Design, build, configure, and operate AKS clusters end to end, including cluster provisioning, node pools, private networking, CNI, ingress/egress, workload identity, RBAC, policies, and secrets integration.
• Implement cluster scaling, resilience, and resource optimization using autoscaling, resource requests and limits, quotas, availability zones, and disruption budgets.
• Manage Kubernetes lifecycle activities, including version upgrades, node image maintenance, patching, certificate rotation, capacity planning, and cost management.
• Establish standardized onboarding processes for application teams and internally developed solutions, including containerization, deployment templates, CI/CD integration, security controls, monitoring, and production readiness.
• Partner with application teams and Operations to deploy workloads, establish support procedures, and transition services into ongoing production support.

3. DevOps, GitHub Enterprise & Infrastructure as Code

• Serve as a technical expert for GitHub Enterprise, including enterprise and organization configuration, security policies, permissions, authentication, audit logging, and license management.
• Design and implement GitHub Actions workflows, reusable pipelines, automated release processes, code scanning, artifact management, and deployment controls.
• Engineer and maintain GitHub Actions runner infrastructure, including self-hosted and ephemeral runners, autoscaling, networking, image management, and workload isolation.
• Develop automated repository provisioning (repository vending), incorporating standardized templates, branch protection, rulesets, required checks, permissions, secrets, and ownership metadata.
• Implement and maintain infrastructure as code using Terraform, Bicep, and related tools.
• Lead the migration and refactoring of existing Bicep infrastructure into Terraform, including module development, state management, resource imports, validation, and deployment cutover.
• Expand Terraform management into additional technology domains, including AWS, GCP, Palo Alto, and Zscaler.
• Develop reusable automation and engineering tools using Python, PowerShell, Bash, or similar scripting languages.

4. Identity & Access Management

• Design and implement enterprise identity and access management solutions using Microsoft Entra ID and Okta across cloud platforms, SaaS applications, and workloads.
• Enhance SSO, MFA, conditional access, identity lifecycle management, RBAC, privileged access, service identities, and secrets and certificate management.
• Develop API integrations, scripting, and automated workflows to streamline provisioning and improve identity governance and auditability.
• Apply identity federation standards and protocols, including OAuth 2.0, OpenID Connect, SAML, and SCIM.
• Partner with Information Security, Risk, and Compliance to implement least-privilege access and separation-of-duties controls.

5. Reliability, Security & Operational Readiness

• Establish monitoring, dashboards, alerting, and operational metrics covering availability, performance, capacity, security, and cloud costs.
• Implement reliability engineering, business continuity, disaster recovery, backup, and recovery practices.
• Participate in incident response, root-cause analysis, problem management, and continuous improvement.
• Apply secure-by-design and DevSecOps practices, including vulnerability management, automated security scanning, policy enforcement, and audit evidence.
• Develop technical documentation, architecture standards, runbooks, and operational procedures.
• Work directly with Operations throughout implementation to ensure knowledge transfer, stabilization, clear service ownership, and acceptance into ongoing production support.

Qualifications & Technical Requirements

Required Experience

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related discipline.
• 7+ years of experience in platform engineering, cloud infrastructure, DevOps, SRE, identity engineering, or related technical disciplines.
• Extensive hands-on experience designing, building, and operating Kubernetes environments, particularly AKS.
• Expert-level experience with GitHub Enterprise, including GitHub Actions, enterprise configuration, runner infrastructure, and automated repository provisioning.
• Strong infrastructure-as-code experience with Terraform and/or Bicep, including infrastructure migration and refactoring.
• Hands-on experience with Microsoft Azure and/or AWS, with working knowledge of the other cloud platform.
• Experience with Microsoft Entra ID and/or Okta and enterprise identity and access management.
• Proficiency in Python, PowerShell, Bash, or similar automation languages.
• Demonstrated ability to take complex engineering initiatives from design through implementation, production deployment, and operational handoff.
• Experience working in established enterprise environments with multiple technical teams and competing priorities.

Technical Skills:-

Cloud & Infrastructure

• Microsoft Azure and AWS
• Azure Kubernetes Service (AKS)
• Azure Data Factory and Azure Virtual Desktop
• Cloud networking, compute, storage, and managed services
• GCP, Palo Alto, and Zscaler

Containers & DevOps

• Kubernetes and Docker
• GitHub Enterprise and GitHub Actions
• CI/CD pipelines and release automation
• Self-hosted and ephemeral runners
• Repository provisioning and governance
• Terraform and Bicep
• Python, PowerShell, and Bash

Identity & Security

• Microsoft Entra ID and Okta
• SSO, MFA, RBAC, and conditional access
• OAuth 2.0, OpenID Connect, SAML, and SCIM
• Workload identity and privileged access management
• Secrets and certificate management
• DevSecOps and security automation

Reliability & Operations

• Monitoring and observability
• High availability and disaster recovery
• Incident management and root-cause analysis
• Cloud cost optimization
• Production readiness and operational transition

Professional Competencies

• Senior-level individual contributor capable of independently owning substantial engineering workstreams with limited direction.
• Equally comfortable with architecture and hands-on implementation, troubleshooting, scripting, and production engineering.
• Strong systems design, networking, and distributed-systems fundamentals.
• Ability to translate complex requirements into practical, reusable, and supportable engineering solutions.
• Effective communicator who can collaborate across application development, infrastructure, security, AI, data, and Operations teams.
• Comfortable working in a fast-paced environment with evolving priorities and multiple concurrent initiatives.
• Strong sense of ownership, accountability, and commitment to documentation and knowledge transfer.

Engagement Expectations

• Six-month contract engagement with the ability to start on short notice.
• Commitment to the full engagement period.
• Ability to ramp quickly and deliver production-ready solutions within an established enterprise environment.
• All workstreams must include working code, technical documentation, operational runbooks, and knowledge transfer to designated internal owners.
• Potential opportunity for permanent employment based on performance, business needs, and approval. Conversion is not guaranteed.

Preferred Experience

• Financial services or other highly regulated enterprise environments.
• Previous consulting or contract engagements delivering complex infrastructure and platform initiatives.
• Experience implementing enterprise governance, compliance, and audit controls.
• Experience supporting AI, data engineering, and internally developed or citizen-developed applications in enterprise environments.