Cloud Platform Engineer

Allegro MicroSystems • Manchester, NH

2d

About The Position

The Cloud Platform Engineer designs, builds, and operates Allegro’s cloud infrastructure and delivery pipelines, with security incorporated from the start. The role turns platform standards into reusable, repeatable code, including Terraform modules, CI/CD pipelines, and automated security checks. The engineer works across GCP and Azure environments and contributes hands-on to Allegro’s secure software development lifecycle, partnering with Platform Architecture, Global Infrastructure, Cybersecurity, and application development teams while following established patterns and standards.

Responsibilities span software composition analysis, CI/CD, infrastructure as code, cloud platform architecture, secure SDLC practices, and operations. The engineer deploys and maintains security tooling, onboards teams to scanning, helps resolve findings, and maintains software bills of materials. The role also builds and supports pipelines and Terraform, implements approved cloud landing zone components and security baselines, supports audit evidence, monitors cloud environments, responds to incidents on an on-call rotation, and maintains operational documentation.

Eligible applicants must reside in a state where Allegro currently has an office location: New Hampshire, Massachusetts, Texas, or Michigan. Certain positions, such as field sales roles, may be exempt from this requirement.

Requirements

• At least 3 years in DevOps, cloud engineering, or systems engineering, including at least 2 years of hands-on experience with a major cloud platform (GCP, Azure, or AWS).
• Bachelor’s degree in computer science, information systems, or equivalent experience.
• Working proficiency with Terraform and at least one cloud CLI.
• Experience building and maintaining CI/CD pipelines.
• Scripting ability in PowerShell, Bash, or Python.
• Understanding of cloud networking, IAM, and core security concepts.
• Familiarity with Git workflows and code review.

Nice To Haves

• Experience deploying or operating SCA or other application security tooling.
• Exposure to containers and Kubernetes (GKE, AKS, or EKS).
• Cloud certification such as Google Professional Cloud Engineer, Azure Administrator (AZ-104), or AWS Solutions Architect Associate.
• Experience in a regulated environment (SOX, CMMC, NIST 800-171).

Responsibilities

• Deploy, configure, and maintain software composition analysis (SCA) tooling across source repositories and build pipelines.
• Onboard application teams and repositories to SCA scanning and integrate scans as pipeline gates with agreed severity thresholds.
• Triage dependency vulnerability and license findings, work with developers on remediation, and track findings to closure.
• Generate and maintain software bills of materials (SBOMs) for in-scope applications.
• Build and maintain CI/CD pipelines for application and infrastructure code.
• Implement pipeline security controls, including secrets management, signed artifacts, least-privilege service identities, and protected branches.
• Improve build reliability and speed, and troubleshoot pipeline failures across teams.
• Write and maintain Terraform to provision cloud resources consistently.
• Use cloud CLIs, SDKs, and scripting to automate operational tasks.
• Manage Terraform state, module versioning, and drift detection, following code review and change management practices.
• Implement cloud landing zone components to approved designs, including networking, identity and access, logging, and policy guardrails.
• Contribute to architecture discussions and document components built and supported.
• Apply security baselines such as CIS benchmarks, organization policies, and Azure Policy to cloud resources and workloads.
• Integrate security testing into the development lifecycle, including SCA, static analysis (SAST), secrets scanning, container scanning, and infrastructure-as-code scanning.
• Support developers in fixing findings and following secure coding and dependency management practices.
• Help produce evidence of SDLC controls for internal audit, SOX, ITGC, and CMMC requirements.
• Monitor cloud environments for availability, cost, and security posture, and respond to incidents as part of an on-call rotation.
• Partner with Cybersecurity, Global Infrastructure, Enterprise Architecture, and application teams.
• Keep runbooks, diagrams, and standards documentation current.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level