Senior Platform Engineer – Cloud, DevOps & AKS

Computer Task Group, Inc•New York, NY

2d•Onsite

About The Position

CTG is seeking a Senior Platform Engineer for a six-month engagement with potential conversion to a permanent position. The role is based in New York, NY and requires U.S. citizenship or Green Card status. The engineer will design, build, and operate secure, scalable cloud platforms across Microsoft Azure and AWS, with particular emphasis on Azure Kubernetes Service (AKS), platform engineering, DevOps, identity and access management, infrastructure as code, and production reliability. The role includes leading application onboarding and platform adoption, integrating security and compliance into engineering workflows, and delivering solutions with documentation, operational procedures, knowledge transfer, and defined ongoing ownership. The candidate must be able to start within a short lead time and commit to the full six-month engagement.

Requirements

At least 7 years of experience in platform engineering, cloud infrastructure, DevOps, site reliability, identity, or related engineering roles.
Strong expertise in Kubernetes and AKS, including cluster architecture, networking, autoscaling, upgrades, security, and operations.
Hands-on experience with Microsoft Azure and/or AWS, with working knowledge of the other cloud platform.
Expert-level experience with GitHub Enterprise, GitHub Actions, CI/CD pipeline development, repository automation, and runner infrastructure.
Strong infrastructure-as-code experience with Terraform and Bicep, including infrastructure migration, module development, and state management.
Proficiency in Docker, Python, PowerShell, Bash, or comparable automation technologies.
Knowledge of Microsoft Entra ID, Okta, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, SCIM, RBAC, and secrets management.
Understanding of DevSecOps, cloud security, least-privilege access, vulnerability management, and compliance controls.
Knowledge of cloud networking, distributed systems, observability, disaster recovery, reliability engineering, and cost management.
Strong troubleshooting, systems design, documentation, and technical communication skills.
Extensive hands-on experience building and operating enterprise Kubernetes and AKS environments.
Demonstrated experience designing and delivering complex cloud and platform engineering initiatives from initial architecture through implementation and production support.
Proven experience with enterprise cloud environments, infrastructure automation, CI/CD pipelines, and identity management.
Experience migrating infrastructure from Bicep to Terraform and implementing reusable infrastructure-as-code solutions.
Experience establishing operational standards, monitoring, runbooks, knowledge transfer, and production handoff processes.
Strong collaboration and stakeholder-management skills, including communicating technical concepts and trade-offs to technical and non-technical audiences.
Must be available to start within a short lead time and commit to the full six-month engagement.
Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related field.
Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group.
Must be a U.S. Citizen or Green Card holder.

Responsibilities

Design, build, and operate secure, scalable cloud platforms across Microsoft Azure and AWS, including networking, compute, storage, identity, security, and monitoring services.
Build and manage AKS clusters, including configuration, networking, node pools, autoscaling, upgrades, patching, security, and performance optimization.
Develop and maintain containerized application deployment patterns using Kubernetes, Docker, and related cloud services.
Design and implement identity and access management solutions using Microsoft Entra ID and Okta, including SSO, MFA, conditional access, RBAC, privileged access, and workload identities.
Build and standardize CI/CD pipelines and software delivery workflows using GitHub Enterprise and GitHub Actions.
Develop repository provisioning, branch protection, security controls, reusable workflows, and self-hosted or ephemeral GitHub Actions runners.
Implement infrastructure as code using Terraform and Bicep, including migrating existing Bicep infrastructure to Terraform and managing configuration across cloud and network environments.
Develop automation and tooling using Python, PowerShell, Bash, or similar scripting languages.
Integrate security and compliance controls into platform engineering and DevOps workflows, including vulnerability scanning, secrets management, policy enforcement, and audit logging.
Establish monitoring, dashboards, alerts, operational runbooks, and reliability metrics for production environments.
Lead application onboarding and platform adoption, including workload assessments, containerization, architecture reviews, and CI/CD implementation.
Support incident response, root-cause analysis, disaster recovery, capacity planning, and cloud cost optimization.
Deliver completed solutions with technical documentation, operational procedures, knowledge transfer, and clearly defined ownership for ongoing support.
Collaborate with application, infrastructure, AI, data, Operations, Security, and Risk teams to deliver platform capabilities and improve engineering standards.
Independently lead technical workstreams, make engineering decisions, and deliver solutions with limited direction.