Principal DevOps Engineer

OneStream

2d•$151,000 - $196,000

About The Position

OneStream Software is a hyper-growth SaaS company focused on financial and operational data analytics for the world’s largest companies. Its software is hosted on Microsoft Azure across regions worldwide. The Principal DevOps Engineer provides technical leadership in designing and automating scalable, secure cloud environments. The role shapes cloud strategy, influences technical direction, resolves complex challenges, and mentors engineers across the organization while partnering across teams to deliver reliable, efficient cloud operations at scale. The role owns technical strategy and multi-quarter roadmaps across Cloud Engineering domains, including CI/CD, infrastructure as code, containers and AKS, observability, and security. It owns the Terraform codebase end to end, embeds security-as-code, designs for reliability and disaster recovery, and develops reusable, versioned Terraform modules and AKS blueprints so engineering teams can self-serve through a paved road. The position has no supervisory responsibilities, and travel is not expected to exceed 10%.

Requirements

BS/BA in Computer Science, Engineering, or a related field.
10+ years of hands-on experience in cloud infrastructure, DevOps, or platform engineering, including IaC (Terraform/Bicep), CI/CD and GitOps, and cloud architecture; Azure is preferred.
Demonstrated experience owning technical strategy and driving organization-wide standards, not just team-level delivery.
Proven transformative impact on improving developer experience.
Deep understanding of the Azure Well Architected Framework.
Comfortable with high ambiguity and able to think strategically and abstractly.
Strong presence and judgment, with the ability to influence all levels of leadership.
Legally authorized to work for any company in the country where the position is located without sponsorship.

Nice To Haves

Experience at a cloud service provider, managed service provider, or SaaS company.
Experience shaping cloud-native strategy at scale, such as the Kubernetes/AKS platform, Azure SQL, AI Foundry, or Azure APIM.
Relevant certifications, such as AZ-305, AZ-400, or CISSP.
Experience developing and solutioning for common compliance frameworks, such as FedRAMP, DoD IL4, SOC, or SOX.

Responsibilities

Own technical strategy and multi-quarter roadmaps across Cloud Engineering’s core domains: CI/CD, IaC, containers/AKS, observability, and security.
Represent Cloud Engineering in cross-functional and leadership forums, partnering with Product, Security, Compliance, Platform, and QE.
Lead complex, multi-quarter initiatives spanning departments and engineering teams, driving alignment, adoption, and delivery.
Serve as the escalation point for the most complex production issues and drive resolution of systemic technical debt.
Mentor engineers and scale technical leadership and standards without relying on direct authority.
Design optimal solutions that balance the ideal technical implementation with financial impacts to the organization.
Own the Terraform codebase end to end, including module design and versioning, remote state strategy on Azure Storage backends, state splitting by lifecycle and ownership, and drift detection.
Embed security-as-code, including managed identities and workload identity federation by default, Key Vault integration, RBAC and Azure Policy defined as Terraform resources, and container image scanning via ACR / Defender for Containers.
Design for reliability through multi-region failover, backup and disaster recovery, and observability; partner with development and business teams on SLO and error-budget definition.
Design reusable, versioned Terraform modules and AKS blueprints that other engineering teams can self-serve.