Cloud Systems Engineer

Signature Performance, Inc.•,

About The Position

Design, provision, integrate, and maintain on-premises and hosted cloud environments across Microsoft Azure and Amazon Web Services (AWS). Administer Windows Server, Microsoft 365, Azure, Active Directory and Entra ID, VMware, storage area networks, and related infrastructure services. Provide advanced troubleshooting and support for server, desktop, application, network, and cloud infrastructure. Author and maintain infrastructure-as-code using technologies such as Terraform, Azure Bicep/ARM templates, and AWS CloudFormation to support repeatable, version-controlled, and auditable environments. Build, operate, and improve CI/CD pipelines for automated build, testing, and deployment using Jenkins, GitHub Actions, or equivalent platforms. Manage application hosting and platform services, including Azure App Service, AWS Elastic Beanstalk, and comparable platform-as-a-service offerings. Containerize and orchestrate services using Docker or Podman and, when applicable, Kubernetes, Azure Kubernetes Service (AKS), or Amazon ECS. Configure and maintain cloud and enterprise networking, including LAN/WAN/VPN, VNets/VPCs, routing, VLANs, DNS, DHCP, private endpoints, firewalls, network security groups, TLS, wireless infrastructure, and controlled egress. Implement and maintain identity and access integrations, including Entra ID, OIDC, SSO, Application Proxy pre-authentication, and App Service Authentication. Manage secrets and application configuration using Azure Key Vault, AWS Secrets Manager, or equivalent secure solutions. Implement and maintain monitoring, logging, observability, and SIEM integrations using Splunk, Azure Monitor, Application Insights, or equivalent tools. Develop automation and operational tooling using PowerShell, Bash, and Python. Maintain the security posture and integrity of systems and defined authorization boundaries across on-premises and hosted cloud environments. Follow and adhere to NIST SP 800-53 controls and standards, and support compliance with FedRAMP, SOC 2, HIPAA, and VA TRM requirements as applicable. Contribute to and maintain System Security Plans (SSP), Plans of Action and Milestones (POA&M), architecture diagrams, system configurations, and operational documentation. Assist Security and Compliance teams with annual audits, ongoing assessments, control evidence, continuous monitoring, and boundary documentation. Design, test, and maintain backup, disaster recovery, and business continuity procedures. Research and evaluate technology solutions for application, platform, infrastructure, and business needs. Collaborate with software architects, developers, security professionals, and business stakeholders to align infrastructure with application and organizational requirements. Educate staff on the effective and secure use of systems, software, applications, and operational processes. Ensure compliance with software, cloud platform, and infrastructure licensing requirements. Rotate as an after-hours or on-call contact and perform after-hours support as needed. Perform other related duties as necessary.

Requirements

4+ years of experience in systems administration, cloud infrastructure, DevOps, platform engineering, or a closely related discipline.
Bachelor's degree in a related field or equivalent professional experience.
Hands-on experience with Microsoft Azure is required; experience with AWS or Google Cloud is preferred.
Experience administering Windows Server, Active Directory, Entra ID, Microsoft 365, virtualization, storage, and enterprise infrastructure.
Proficiency with infrastructure-as-code technologies such as Terraform, Bicep/ARM, or CloudFormation.
Experience building and maintaining CI/CD pipelines using Jenkins, GitHub Actions, or equivalent tools.
Scripting and automation proficiency with PowerShell; working knowledge of Bash and Python.
Experience with application hosting platforms such as Azure App Service, AWS Elastic Beanstalk, or comparable PaaS solutions.
Working knowledge of container technologies and orchestration platforms, including Docker/Podman and Kubernetes/AKS/ECS.
Working knowledge of identity and access management, including OIDC, SSO, authentication, authorization, and least-privilege access.
Strong network troubleshooting and engineering knowledge, including VPN, DNS, DHCP, TCP/IP, Layer 2 and Layer 3 routing, VLANs, SD-WAN, firewalls, routers, switches, and wireless technologies.
Experience with observability, logging, SIEM, secrets management, and version control using Git.
Analytical problem-solving skills and the ability to develop solutions for complex technical and business requirements.
Ability to manage multiple concurrent projects, prioritize effectively, and work successfully with minimal supervision in a fast-paced environment.
Ability to communicate effectively with technical and nontechnical audiences and work as an effective cross-functional team member.
High level of attention to detail, urgency, professionalism, integrity, adaptability, motivation, and commitment to organizational goals.
Maintains applicable certifications or can achieve required certifications within six months of employment. Relevant certifications may include Microsoft Azure Administrator (AZ-104), Azure Solutions Architect Expert (AZ-305), AWS Certified Solutions Architect - Associate, CompTIA Security+, and HashiCorp Certified: Terraform Associate.
U.S. Citizenship or naturalized citizenship is required for this position.
All work on all positions at Signature Performance must be completed in the continental United States, Alaska, or Hawaii.

Nice To Haves

Experience with AWS or Google Cloud is preferred.
Understanding of compliance frameworks relevant to federal and healthcare workloads, including FedRAMP, NIST SP 800-53, SOC 2, HIPAA, and VA TRM is strongly preferred.

Responsibilities

Design, provision, integrate, and maintain on-premises and hosted cloud environments across Microsoft Azure and Amazon Web Services (AWS).
Administer Windows Server, Microsoft 365, Azure, Active Directory and Entra ID, VMware, storage area networks, and related infrastructure services.
Provide advanced troubleshooting and support for server, desktop, application, network, and cloud infrastructure.
Author and maintain infrastructure-as-code using technologies such as Terraform, Azure Bicep/ARM templates, and AWS CloudFormation to support repeatable, version-controlled, and auditable environments.
Build, operate, and improve CI/CD pipelines for automated build, testing, and deployment using Jenkins, GitHub Actions, or equivalent platforms.
Manage application hosting and platform services, including Azure App Service, AWS Elastic Beanstalk, and comparable platform-as-a-service offerings.
Containerize and orchestrate services using Docker or Podman and, when applicable, Kubernetes, Azure Kubernetes Service (AKS), or Amazon ECS.
Configure and maintain cloud and enterprise networking, including LAN/WAN/VPN, VNets/VPCs, routing, VLANs, DNS, DHCP, private endpoints, firewalls, network security groups, TLS, wireless infrastructure, and controlled egress.
Implement and maintain identity and access integrations, including Entra ID, OIDC, SSO, Application Proxy pre-authentication, and App Service Authentication.
Manage secrets and application configuration using Azure Key Vault, AWS Secrets Manager, or equivalent secure solutions.
Implement and maintain monitoring, logging, observability, and SIEM integrations using Splunk, Azure Monitor, Application Insights, or equivalent tools.
Develop automation and operational tooling using PowerShell, Bash, and Python.
Maintain the security posture and integrity of systems and defined authorization boundaries across on-premises and hosted cloud environments.
Follow and adhere to NIST SP 800-53 controls and standards, and support compliance with FedRAMP, SOC 2, HIPAA, and VA TRM requirements as applicable.
Contribute to and maintain System Security Plans (SSP), Plans of Action and Milestones (POA&M), architecture diagrams, system configurations, and operational documentation.
Assist Security and Compliance teams with annual audits, ongoing assessments, control evidence, continuous monitoring, and boundary documentation.
Design, test, and maintain backup, disaster recovery, and business continuity procedures.
Research and evaluate technology solutions for application, platform, infrastructure, and business needs.
Collaborate with software architects, developers, security professionals, and business stakeholders to align infrastructure with application and organizational requirements.
Educate staff on the effective and secure use of systems, software, applications, and operational processes.
Ensure compliance with software, cloud platform, and infrastructure licensing requirements.
Rotate as an after-hours or on-call contact and perform after-hours support as needed.
Perform other related duties as necessary.