Cloud Platform Engineer

Allegro MicroSystems•Manchester, NH

About The Position

The Cloud Engineer designs, builds, and operates Allegro’s cloud infrastructure and delivery pipelines, incorporating security from the start. The role turns platform standards into repeatable code—including Terraform modules, CI/CD pipelines, and automated security checks—so development teams can deliver software quickly and safely. The engineer works across GCP and Azure environments, contributes hands-on to Allegro’s secure software development lifecycle, and executes established patterns and standards in partnership with Platform Architecture, Global Infrastructure, Cybersecurity, and application development teams. The position covers software composition analysis, CI/CD pipeline development and security, infrastructure as code, cloud platform architecture, secure SDLC practices, and cloud operations. It includes monitoring cloud environments for availability, cost, and security posture; responding to incidents as part of an on-call rotation; and maintaining runbooks, diagrams, and standards documentation. Eligible applicants must reside in a state where Allegro currently has an office location: New Hampshire, Massachusetts, Texas, or Michigan. Certain positions, such as field sales roles, may be exempt from this requirement.

Requirements

At least 3 years of experience in DevOps, cloud engineering, or systems engineering, including at least 2 years of hands-on experience with a major cloud platform (GCP, Azure, or AWS).
Bachelor’s degree in computer science, information systems, or equivalent experience.
Working proficiency with Terraform and at least one cloud CLI.
Experience building and maintaining CI/CD pipelines.
Scripting ability in PowerShell, Bash, or Python.
Understanding of cloud networking, IAM, and core security concepts.
Familiarity with Git workflows and code review.

Nice To Haves

Experience deploying or operating SCA or other application security tooling.
Exposure to containers and Kubernetes (GKE, AKS, or EKS).
Cloud certification such as Google Professional Cloud Engineer, Azure Administrator (AZ-104), or AWS Solutions Architect Associate.
Experience in a regulated environment (SOX, CMMC, NIST 800-171).

Responsibilities

Deploy, configure, and maintain software composition analysis (SCA) tooling across source repositories and build pipelines.
Onboard application teams and repositories to SCA scanning, integrate scans as pipeline gates using agreed severity thresholds, and help resolve findings through closure.
Generate and maintain software bills of materials (SBOMs) for in-scope applications.
Build and maintain CI/CD pipelines for application and infrastructure code.
Implement pipeline security controls, including secrets management, signed artifacts, least-privilege service identities, and protected branches.
Improve build reliability and speed, and troubleshoot pipeline failures across teams.
Write and maintain Terraform to provision cloud resources consistently.
Use cloud CLIs, SDKs, and scripting to automate operational tasks; manage Terraform state, module versioning, and drift detection while following code review and change management practices.
Implement cloud landing-zone components according to approved designs, including networking, identity and access, logging, and policy guardrails.
Contribute to architecture discussions and document components built and supported.
Apply security baselines such as CIS benchmarks, organization policies, and Azure Policy to cloud resources and workloads.
Integrate security testing into the development lifecycle, including SCA, SAST, secrets scanning, container scanning, and infrastructure-as-code scanning.
Support developers in remediating findings and following secure coding and dependency management practices.
Help produce evidence of SDLC controls for internal audit, SOX, ITGC, and CMMC requirements.
Monitor cloud environments for availability, cost, and security posture, and respond to incidents as part of an on-call rotation.
Partner with Cybersecurity, Global Infrastructure, Enterprise Architecture, and application teams.
Keep runbooks, diagrams, and standards documentation current.