Safran

Cloud & Infrastructure Engineer

Safran$90K — $120K *
Enterprise Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • 4-6 years of enterprise infrastructure engineering experience in various key domains.
  • Experience with privileged access management platforms such as CyberArk or BeyondTrust.
  • Hands-on administration of enterprise MFA platforms like Cisco DUO or Azure MFA.
  • Proficient in Microsoft 365 services administration, especially GCC High.
  • AWS experience with services including EC2, IAM, and VPC.
  • Knowledge of VMware vSphere/ESXi and Windows Server management.
  • Strong troubleshooting abilities and adherence to controlled change management processes.

Responsibilities

  • Design and maintain Safran USA's hybrid infrastructure across on-premises and cloud systems.
  • Administer Microsoft 365 GCC High tenant services including identity governance and threat policies.
  • Manage operations of Safran's AWS Landing Zone and implement cloud security best practices.
  • Oversee VMware vSphere/ESXi environment and maintain Windows Server lifecycle management.
  • Administer privileged access management and MFA systems.
  • Contribute to infrastructure health monitoring and issue triage.
  • Support compliance with CMMC and ITAR regulations in operations.

Benefits

  • Permanent full-time position in a stable and reputable organization.
  • Opportunity to grow into cloud operations as AWS GovCloud footprint expands.
  • Work within a small, highly capable team in a CMMC Level 2 / ITAR-regulated environment.
  • Engagement with multiple aerospace subsidiaries, providing diverse operational challenges.
Full Job Description
Job details

Domain

Performance and Support

Job field / Job profile

IT - IT operations management

Job title

Cloud & Infrastructure Engineer

Employment type

Permanent

Professional category

Professional, Engineer & Manager

Part time / Full time

Full-time

Job description

The Cloud & Infrastructure Engineer is a hands-on technical role responsible for the day-to-day operation of Safran USA's hybrid infrastructure across defined primary domains, while supporting peers in adjacent areas. The role sits within a small, highly capable team and operates within a CMMC Level 2 / ITAR-regulated shared services environment supporting multiple Safran aerospace subsidiaries. The right candidate owns their domains with discipline, supports CMMC compliance activities operationally, and grows into cloud operations as Safran USA expands its AWS GovCloud footprint.

But what else? (advantages, specificities, etc.)

Qualifications
• 4-6 years of hands-on enterprise infrastructure engineering experience across two or more of the primary domains listed above.
• Privileged access management platform -CyberArk, BeyondTrust, or equivalent. Must be able to describe vault structure, session recording, and access review processes personally configured.
• Enterprise MFA platform - hands-on administration of Cisco DUO, Okta, Azure MFA, or equivalent. Must be able to describe policy configuration and AD integration personally managed.
• Microsoft 365 administration - Exchange, SharePoint, Teams, Purview, Defender. GCC High experience preferred.
• AWS hands-on experience - EC2, IAM roles and policies, VPC, S3, CloudWatch. Must describe specific configurations personally built or managed.
• VMware vSphere / ESXi operational management
• Windows Server and Active Directory administration - GPO, DNS, identity management.
• Enterprise backup and disaster recovery operations - backup job management, restore execution, and DR testing.
• Strong troubleshooting skills and discipline to follow controlled change management processes.

Candidate skills & requirements

Key Responsibilities:
1. Infrastructure Architecture & Engineering
Design, implement, and maintain Safran USA's hybrid infrastructure spanning on-premises datacenter systems, AWS GovCloud, and Microsoft 365 GCC High. Develop and maintain architecture documentation, configuration baselines, and operational runbooks for all systems in scope. Ensure high availability, security, and performance of critical systems in a shared services environment supporting multiple Safran aerospace subsidiaries.
2. Microsoft 365 GCC High Administration
Administer Safran USA's Microsoft 365 Government Community Cloud High (GCC High) tenant across the full suite of services - Exchange Online, Teams, SharePoint, OneDrive, Entra ID, and Intune. Responsibilities include identity governance, Conditional Access policy management, MFA enforcement, and endpoint management consistent with CMMC and ITAR requirements.
Configure and maintain Purview compliance center - audit logging, DLP policies, retention labels, and sensitivity labels. Administer Defender for Office 365 threat policies and alert routing. Support Microsoft 365 GCC High licensing and governance.
3. AWS / AWS GovCloud Administration
Support the operation and progressive build-out of Safran USA's AWS Landing Zone, currently under construction. Manage EC2, VPC, IAM roles and policies, S3, CloudWatch, and Security Groups within a GovCloud regulated environment. Implement cloud security best practices.
Contribute to workload migration planning as Safran USA transitions on-premises systems to AWS over the [redacted] timeframe.
4. Virtualization & Server Administration
Administer Safran USA's VMware vSphere / ESXi environment across the datacenter - VM provisioning, snapshot governance, host health monitoring, resource allocation, and patching. Manage Windows Server environments including configuration baselines and lifecycle management. Work alongside the Systems Engineer to maintain operational continuity and support disaster recovery exercises.
5. Security Systems Administration
Primary - Own from Day 1
• Privileged Access Management - administer Safran USA's PAM platform- vault structure, privileged session management, session recording, credential vaulting, access reviews, and break-glass procedures.
• Cisco DUO Federal MFA - administer user enrollment, device management, policy enforcement, AD integration.
6. Monitoring & Systems Management
Contribute to infrastructure health monitoring using SolarWinds NPM/SAM alongside the Systems Engineer. Review alerts, triage operational issues, and escalate appropriately. Support SolarWinds SEM log review and alerting. Maintain operational awareness of server, application, and cloud performance across owned domains.
7. Compliance & Governance
8. Backup & Disaster Recovery Administration

Annual salary

TBD

Job location

Job location

North America, United States, Texas

City (-ies)

2201 W. Royal Lane Irving, TX 75063 Irving

Applicant criteria

Minimum education level achieved

Bachelor's Degree

Minimum experience level required

More than 3 years

ITAR Controlled Position: Select "Yes" if role requires U.S. citizenship/permanent residency

Yes

About Safran

Safran is a French multinational aerospace and defense company. It designs, manufactures, and sells aircraft engines, rocket engines, and other aerospace components. Safran is also involved in the defense industry, producing optronics, avionics, and other defense systems. The company has partnerships with several other aerospace and defense companies, including General Electric and Boeing. Safran has operations in over 60 countries and employs over 95,000 people.
Learn more about Safran
Size
95,000 employees
Industry

Similar Jobs

More Jobs at Safran

More Enterprise Technology Jobs

Find similar Cloud & Infrastructure Engineer jobs: