Senior Platform Engineer – Cloud, DevOps & AKS

CTG is seeking to fill a Senior Platform Engineer – Cloud, DevOps & AKS position for our client.

Location: New York, NY
Duration: 6 months, with potential for conversion to a permanent position
Citizenship Requirement: U.S. Citizen or Green Card holder

Duties:

• Design, build, and operate secure, scalable cloud platforms across Microsoft Azure and AWS, including networking, compute, storage, identity, security, and monitoring services.

• Build and manage Azure Kubernetes Service (AKS) clusters, including configuration, networking, node pools, autoscaling, upgrades, patching, security, and performance optimization.

• Develop and maintain containerized application deployment patterns using Kubernetes, Docker, and related cloud services.

• Design and implement identity and access management solutions using Microsoft Entra ID and Okta, including SSO, MFA, conditional access, RBAC, privileged access, and workload identities.

• Build and standardize CI/CD pipelines and software delivery workflows using GitHub Enterprise and GitHub Actions.

• Develop automated repository provisioning, branch protection, security controls, reusable workflows, and self-hosted or ephemeral GitHub Actions runners.

• Implement infrastructure as code using Terraform and Bicep, including migrating existing Bicep infrastructure to Terraform and managing configuration across cloud and network environments.

• Develop automation and tooling using Python, PowerShell, Bash, or similar scripting languages.

• Integrate security and compliance controls into platform engineering and DevOps workflows, including vulnerability scanning, secrets management, policy enforcement, and audit logging.

• Establish monitoring, dashboards, alerts, operational runbooks, and reliability metrics to support production environments.

• Lead application onboarding and platform adoption, including workload assessments, containerization, architecture reviews, and CI/CD implementation.

• Support incident response, root-cause analysis, disaster recovery, capacity planning, and cloud cost optimization.

• Deliver completed solutions with technical documentation, operational procedures, knowledge transfer, and clearly defined ownership for ongoing support.

• Collaborate with application, infrastructure, AI, data, Operations, Security, and Risk teams to deliver platform capabilities and improve engineering standards.

Skills:

• Strong expertise in Kubernetes and Azure Kubernetes Service (AKS), including cluster architecture, networking, autoscaling, upgrades, security, and operations.

• Hands-on experience with Microsoft Azure and/or AWS, with working knowledge of the other cloud platform.

• Expert-level experience with GitHub Enterprise, GitHub Actions, CI/CD pipeline development, repository automation, and runner infrastructure.

• Strong infrastructure-as-code experience with Terraform and Bicep, including infrastructure migration, module development, and state management.

• Proficiency in Docker, Python, PowerShell, Bash, or comparable automation technologies.

• Knowledge of Microsoft Entra ID, Okta, SSO, MFA, OAuth 2.0, OpenID Connect, SAML, SCIM, RBAC, and secrets management.

• Understanding of DevSecOps, cloud security, least-privilege access, vulnerability management, and compliance controls.

• Knowledge of cloud networking, distributed systems, observability, disaster recovery, reliability engineering, and cost management.

• Strong troubleshooting, systems design, documentation, and technical communication skills.

Experience:

• At least 7 years of experience in platform engineering, cloud infrastructure, DevOps, site reliability, identity, or related engineering roles.

• Extensive hands-on experience building and operating enterprise Kubernetes and AKS environments.

• Demonstrated experience designing and delivering complex cloud and platform engineering initiatives from initial architecture through implementation and production support.

• Proven experience with enterprise cloud environments, infrastructure automation, CI/CD pipelines, and identity management.

• Experience migrating infrastructure from Bicep to Terraform and implementing reusable infrastructure-as-code solutions.

• Experience establishing operational standards, monitoring, runbooks, knowledge transfer, and production handoff processes.

• Ability to independently lead technical workstreams, make engineering decisions, and deliver solutions with limited direction.

• Strong collaboration and stakeholder-management skills, with the ability to communicate technical concepts and trade-offs to technical and non-technical audiences.

• Must be available to start within a short lead time and commit to the full six-month engagement.

Education:

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related field required.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

To Apply:

To be considered, please apply directly to this requisition using the link provided. Kindly forward this to any other interested parties. Thank you!