Sr. Cloud Infrastructure Engineer, Managed Services (W2 Contract)

Cariad, Inc. • Bellevue, WA

70d • $90 - $135

About The Position

We are CARIAD, an automotive software development team with the Volkswagen Group. Our mission is to make the automotive experience safer, more sustainable, more comfortable, more digital, and more fun. To achieve that we are building the leading tech stack for the automotive industry and creating a unified software platform for over 10 million new vehicles per year. We’re looking for talented, digital minds like you to help us create code that moves the world. Together with you, we’ll build outstanding digital experiences and products for all Volkswagen Group brands that will transform mobility. Join us as we shape the future of the car and everyone around it. The Senior Cloud Infrastructure Engineer (Contract) will play a critical role in architecting and deploying CARIAD’s Managed IT Services Platform—a secure, scalable, multi-tenant environment built on Microsoft Azure. Key responsibilities include establishing centralized administration using Azure Lighthouse and integrating SailPoint IdentityNow to automate identity and access management. This role is responsible for defining the platform’s technical foundation and delivering secure infrastructure using Infrastructure as Code (IaC) with Terraform and ARM templates. The engineer will ensure all solutions meet Volkswagen Group’s cloud security and compliance standards. Blending deep hands-on engineering expertise with automation and architectural leadership, this position will drive the development of a reusable, governed, and operationally efficient cloud services platform that supports long-term scalability and onboarding for global customers.

Requirements

• Bachelor’s degree in Computer Science, IT, or equivalent hands-on experience
• 8+ years in cloud infrastructure or platform engineering
• 4+ years in Microsoft Azure, with experience in multi-tenant or enterprise-scale deployments
• Scripting experience: Powershell
• Strong hands-on expertise in Azure Lighthouse, Terraform, ARM Templates
• CI/CD pipeline integration (GitHub Actions, Azure DevOps, etc.)
• SailPoint IdentityNow or equivalent IAM platforms
• Azure security (RBAC, PIM, Policies, Key Vault, Zero Trust)
• Familiar with infrastructure security testing (e.g., tfsec, Checkov)
• Experience in regulated industries (automotive, OEMs, or similar) a plus
• Strong communication skills and ability to work independently as a contractor

Nice To Haves

• Microsoft Certified: Azure Administrator Associate
• HashiCorp Certified: Terraform Associate
• AZ-500: Microsoft Azure Security Technologies
• ITIL Foundation Certification

Responsibilities

• Architect and deploy a secure, scalable, multi-tenant Azure platform
• Use Azure Lighthouse for centralized control and tenant isolation
• Integrate SailPoint IdentityNow for IAM provisioning and lifecycle governance
• Build reusable landing zones and reference architectures
• Collaborate with stakeholders, DevOps, and InfoSec teams to ensure alignment
• Continuously improve architecture using Azure innovations and security trends
• Develop Terraform modules and ARM templates for Azure infrastructure
• Integrate IaC into CI/CD pipelines with full version control and lifecycle automation
• Standardize tagging, naming conventions, and configuration management
• Automate provisioning for shared services, network configurations, and RBAC
• Use security validation tools (e.g., tfsec, Checkov) in all deployment pipelines
• Implement Azure RBAC, PIM, and Zero Trust models across tenants
• Enforce secure access policies (JIT, NSGs, Key Vault secrets)
• Automate security baseline deployments using Defender for Cloud and Sentinel
• Partner with InfoSec and audit teams for reviews, documentation, and compliance
• Manage tenant provisioning workflows and onboarding
• Monitor platform health, logs, metrics, and alerts across environments
• Troubleshoot infrastructure issues and support BAU operations
• Maintain documentation and support guides
• Follow ITSM best practices for change control and incident resolution
• Conduct RCA for critical issues and implement long-term fixes
• Collaborate in CAB meetings and cross-team escalation paths

Benefits

• Hourly range is dependent on factors such as geographical differentials, credentials or certifications, industry-based experience, qualification and training.
• In the city of Bellevue, WA, the hourly range for this contract position is $90 - $135/hr.

What This Job Offers

• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees