OverviewThe DevOps Engineering Advisor is a senior, hands-on individual contributor responsible for the design, management, and continuous improvement of MRO's cloud environments, with a primary focus on Microsoft Azure and Google Cloud Platform (GCP) and secondary exposure to Amazon Web Services (AWS). The role combines cloud platform engineering, infrastructure automation, and DevOps practices: the Advisor builds and operates well-architected, secure, and cost-effective cloud infrastructure while continuing to own automation tooling, CI/CD enablement, and the IT infrastructure that supports MRO's product and corporate workloads. The Advisor works autonomously, partners closely with application engineering, infrastructure, security, and release management teams, and serves as a trusted technical advisor on cloud architecture, operations, and governance in a HIPAA- and HITRUST-regulated healthcare environment.
ResponsibilitiesCloud Environment Management- Design, deploy, operate, and continuously improve cloud environments in Azure and GCP (and AWS as needed), including subscription/project structure, landing zones, resource organization, tagging and labeling standards, and separation of development, test, and production environments
- Manage cloud identity and access using least-privilege principles (Entra ID and Azure RBAC, GCP IAM, managed and workload identities, identity federation) in partnership with Security
- Build and maintain cloud networking, including VNets/VPCs, subnets, routing, hub-and-spoke topologies, private endpoints and Private Service Connect, DNS, load balancing, and hybrid connectivity to on-premises and colocation sites
- Own capacity planning, lifecycle management, patching, and upgrade planning for cloud-hosted infrastructure and platform services
Well-Architected Design and Governance- Apply the pillars of the Azure Well-Architected Framework, Google Cloud Architecture Framework, and AWS Well-Architected Framework (reliability, security, cost optimization, operational excellence, and performance efficiency) to new and existing workloads
- Lead well-architected reviews of cloud workloads; document findings, prioritize remediation, and track improvements to closure
- Define and enforce guardrails through policy-as-code (Azure Policy, GCP Organization Policy) and documented cloud governance standards
- Drive cloud cost management and FinOps practices, including cost visibility and allocation, right-sizing, reserved capacity and committed-use planning, and anomaly detection
- Produce and maintain architecture diagrams, design documents, standards, and operational runbooks
Automation, Infrastructure as Code, and DevOps- Provision and manage infrastructure through Infrastructure as Code (Terraform preferred; Bicep/ARM and native GCP tooling as applicable) using versioned, reusable modules, remote state, and drift detection
- Design, build, and maintain CI/CD pipelines (Azure DevOps, GitLab, GitHub Actions, or similar) for infrastructure and application deployments, including automated validation, security scanning, approvals, and environment promotion
- Develop automation in PowerShell, Python, or Bash to eliminate manual, repetitive, or error-prone operational work
- Select, implement, and support development, testing, automation, and IT infrastructure tooling; advise teams on DevOps practices and release processes
- Support container and platform services used by product teams (for example, AKS and GKE) and their underlying cloud infrastructure
Security, Compliance, and Reliability- Implement and maintain cloud security controls aligned with HIPAA, HITRUST, and MRO policy, including encryption, key and secret management, network segmentation, centralized logging, and vulnerability remediation
- Partner with Security and Compliance on assessments, audits, evidence collection, and remediation of cloud findings
- Establish and maintain observability (for example, Azure Monitor, Google Cloud Observability, Datadog): metrics, logs, alerting, and dashboards; participate in incident response and root cause analysis
- Design, implement, and test backup, disaster recovery, and high-availability strategies with defined RTO/RPO targets
Advisory and Collaboration- Act as a technical advisor to engineering, product, and IT leadership on cloud architecture, platform selection, migrations, and modernization
- Understand the needs of stakeholders, translate them into cloud and automation solutions, and communicate trade-offs clearly in writing and in design review forums
- Evaluate emerging cloud services and tooling, including AI-assisted engineering, and recommend adoption where it adds value
- Mentor and share knowledge with infrastructure and development team members; contribute to documentation and standards
QualificationsRequired- Minimum of 7 years of experience in cloud infrastructure, DevOps, platform engineering, site reliability engineering, or systems engineering
- Minimum of 4 years of hands-on experience designing, deploying, and operating production workloads in Microsoft Azure, including landing zones, networking, identity (Entra ID), and governance (Azure Policy, RBAC)
- Minimum of 2 years of hands-on experience with Google Cloud Platform, including organization and project structure, IAM, VPC networking, Compute Engine or GKE, and Cloud Observability
- Working knowledge of the Azure, Google Cloud, and AWS well-architected frameworks, with demonstrated experience applying them to assess and improve workloads
- Minimum of 3 years of experience with Infrastructure as Code (Terraform preferred; Bicep/ARM acceptable) and Git-based workflows
- Minimum of 3 years of experience building and maintaining CI/CD pipelines and automated build, delivery, and release tooling (Azure DevOps, GitLab CI, GitHub Actions, or similar)
- Minimum of 3 years of experience in automation scripting using one or more of PowerShell, Python, or Bash
- Experience with Microsoft-based infrastructure (Windows Server, Active Directory, Entra ID, Microsoft 365 integration points) and hybrid connectivity to on-premises environments
- Experience with secure infrastructures and protected data, including PHI and PII, in a HIPAA, HITRUST, or similarly regulated environment
- Minimum of 3 years of experience working in an Agile delivery environment
- Strong troubleshooting, documentation, and written and verbal communication skills; able to work autonomously and own initiatives end to end
Preferred- Hands-on experience with AWS (accounts and Organizations, IAM, VPC networking, core compute and storage services)
- Relevant certifications, such as Microsoft Certified: Azure Solutions Architect Expert or Azure Administrator Associate, Google Cloud Professional Cloud Architect, AWS Certified Solutions Architect, HashiCorp Terraform Associate, or FinOps Certified Practitioner
- Experience with Kubernetes and containerized workloads (AKS, GKE), policy-as-code, and observability platforms
- Experience with cloud migration, platform consolidation, or M&A integration of cloud and identity environments
- Linux administration experience and familiarity with Jira and Confluence
Education- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience
Total CompensationBase pay is one element of the total compensation package. Eligible employees may also receive an annual cash bonus and have access to a comprehensive benefits offering, including medical, dental, vision, life insurance, and a 401(k) plan.
Salary RangeIt is not typical for an individual to be hired at or near the top of the range. Individual pay may be influenced by factors such as skills, qualifications, experience, licensure, certifications, geographic location, and internal equity.
#LI-Remote
Pay RangeUSD $115,000.00 - USD $155,000.00 /Yr.
