Principal Cloud DevOps Engineer

OneStream

1d•$151,000 - $196,000•Remote

About The Position

OneStream Software is a hyper-growth SaaS company focused on financial and operational data analytics for the world’s largest companies. It hosts its software on Microsoft Azure across regions worldwide. This Principal-level role provides technical leadership in designing and automating scalable, secure cloud environments. The employee will shape cloud strategy, influence technical direction, resolve complex challenges, and mentor engineers across the organization. The role partners across teams to drive reliable, efficient cloud operations at scale. The role owns technical strategy and multi-quarter roadmaps across CI/CD, infrastructure as code, containers and AKS, observability, and security. It owns the Terraform codebase end to end, embeds security-as-code, designs for reliability and disaster recovery, and provides reusable, versioned Terraform modules and AKS blueprints so engineering teams can self-serve. The position has no supervisory responsibilities, and travel is not expected to exceed 10%.

Requirements

BS/BA in Computer Science, Engineering, or a related field.
10+ years of hands-on experience in cloud infrastructure, DevOps, or platform engineering, including IaC (Terraform/Bicep), CI/CD and GitOps, and cloud architecture; Azure is preferred.
Demonstrated experience owning technical strategy and driving organization-wide standards, not just team-level delivery.
Proven transformative impact on improving developer experience.
Deep understanding of the Azure Well Architected Framework.
Comfortable with high ambiguity and able to think strategically and abstractly.
Strong presence and judgment, with the ability to influence all levels of leadership.

Nice To Haves

Experience at a cloud service provider, managed service provider, or SaaS company.
Experience shaping cloud-native strategy at scale, such as Kubernetes/AKS platform, Azure SQL, AI Foundary, or Azure APIM.
Relevant certifications such as AZ-305, AZ-400, or CISSP.
Experience developing and solutioning for common compliance frameworks, such as FedRAMP, DoD IL4, SOC, or SOX.

Responsibilities

Own technical strategy and multi-quarter roadmaps across Cloud Engineering’s core domains: CI/CD, IaC, containers/AKS, observability, and security.
Represent Cloud Engineering in cross-functional and leadership forums, partnering with Product, Security, Compliance, Platform, and QE.
Lead complex, multi-quarter initiatives across departments and engineering teams, driving alignment, adoption, and delivery.
Serve as the escalation point for the most complex production issues and drive resolution of systemic technical debt.
Mentor engineers and scale technical leadership and standards without relying on direct authority.
Design optimal solutions that balance technical implementation with financial impacts to the organization.
Own the Terraform codebase end to end, including module design and versioning, Azure Storage remote state strategy, state-splitting by lifecycle and ownership, and drift detection.
Embed security-as-code, including managed identities and workload identity federation by default, Key Vault integration, RBAC and Azure Policy as Terraform resources, and container image scanning via ACR / Defender for Containers.
Design for reliability through multi-region failover, backup and disaster recovery, observability, and partnership with development and business teams on SLO and error-budget definition.
Design reusable, versioned Terraform modules and AKS blueprints that enable engineering teams to self-serve the paved road.