The Cloud Engineer designs, builds, and operates Allegro's cloud infrastructure and delivery pipelines with security built in from the start. This role turns platform standards into working, repeatable code: Terraform modules, CI/CD pipelines, and automated security checks that let development teams ship quickly and safely. The engineer works across GCP and Azure environments and is a hands-on contributor to Allegro's secure software development lifecycle.
The role partners closely with Platform Architecture, Global Infrastructure, Cybersecurity and application development teams, and executes within established patterns and standards.
What You Will DoSoftware composition analysis (SCA)- Deploy, configure, and maintain SCA tooling across source repositories and build pipelines.
- Onboard application teams and repositories to SCA scanning, and integrate scans as pipeline gates with agreed severity thresholds.
- Triage dependency vulnerability and license findings, work with developers on remediation, and track findings to closure.
- Generate and maintain software bills of materials (SBOMs) for in-scope applications.
CI/CD pipelines- Build and maintain CI/CD pipelines (for example GitHub Actions, Azure DevOps, GitLab CI, or Cloud Build) for application and infrastructure code.
- Implement pipeline security controls: secrets management, signed artifacts, least-privilege service identities, and protected branches.
- Improve build reliability and speed, and troubleshoot pipeline failures across teams.
Infrastructure as code and cloud CLI- Write and maintain Terraform to provision cloud resources consistently.
- Use cloud CLIs and SDKs plus scripting to automate operational tasks.
- Manage Terraform state, module versioning, and drift detection, and follow code review and change management practices.
Platform architecture- Implement cloud landing zone components to approved designs: networking, identity and access, logging, and policy guardrails.
- Contribute to architecture discussions and document the components the engineer builds and supports.
- Apply security baselines (CIS benchmarks, organization policies, Azure Policy) to cloud resources and workloads.
Secure SDLC- Integrate security testing into the development lifecycle: SCA, static analysis (SAST), secrets scanning, container and IaC scanning.
- Support developers in fixing findings and following secure coding and dependency management practices.
- Help produce evidence of SDLC controls for internal audit, SOX, ITGC, and CMMC requirements.
Operations and collaboration- Monitor cloud environments for availability, cost, and security posture, and respond to incidents as part of an on-call rotation.
- Partner with Cybersecurity, Global Infrastructure, Enterprise Architecture, and application teams.
- Keep runbooks, diagrams, and standards documentation current.
What You Will Need- 3+ years in DevOps, cloud engineering, or systems engineering, with at least 2 years hands-on in a major cloud platform (GCP, Azure, or AWS).
- Bachelor's degree in computer science, information systems, or equivalent experience.
- Working proficiency with Terraform and at least one cloud CLI.
- Experience building and maintaining CI/CD pipelines.
- Scripting ability in PowerShell, Bash, or Python.
- Understanding of cloud networking, IAM, and core security concepts.
- Familiarity with Git workflows and code review.
Preferred Qualifications- Experience deploying or operating SCA or other application security tooling.
- Exposure to containers and Kubernetes (GKE, AKS, or EKS).
- Cloud certification such as Google Professional Cloud Engineer, Azure Administrator (AZ-104), or AWS Solutions Architect Associate.
- Experience in a regulated environment (SOX, CMMC, NIST 800-171).
Eligible applicants must reside in a state where Allegro currently has an office location: This includes New Hampshire, Massachusetts, Texas, and Michigan. Certain positions (such as field sales roles) may be exempt from this requirement.
