EY
Position Overview
Azure Cloud Platform Engineer – GPS (Government & Public Sector) at EY. This remote role supports U.S. defense and government engagements within EY’s GPS Technology Organization.
Key Responsibilities
Design and maintain Infrastructure as Code (IaC) for scalable and secure cloud environments using Bicep and ARM templates.
Engineer, automate and deploy platform solutions (Infrastructure & Application) to meet and exceed Product Managers’ expectations.
Build and deploy CI/CD pipelines using tools such as Azure DevOps Server, GIT, Helm and Ansible Command Line Interface (CLI).
Package and deploy containerized applications (e.g., Kubernetes, Azure Container Apps—ACA, Docker, Helm).
Implement application code packaging, deployment strategies and container orchestration.
Develop and manage base container images and support hardened OS images (e.g., DISA STIG).
Proactively evolve and apply DevSecOps methodologies, standards and industry best‑practice.
Independently research and remediate/troubleshoot day‑to‑day issues.
Apply modern development standards, global product‑specific guidelines, security standards and usability design principles.
Ensure quality through use of manual and automated controls.
Identify, communicate and mitigate Risks, Assumptions, Issues and Decisions throughout full lifecycle.
Use critical thinking to evaluate options, propose impactful plans and roadmaps that balance tactical and strategic needs.
Skills & Attributes for Success
Design, implementation and administration of containerized applications using Azure Kubernetes Services and other PaaS services.
Proficient in scripting with PowerShell, Python, JavaScript and Ansible.
Ability to design and improve infrastructure (IaC) and application development processes.
Strong knowledge of Azure Policies and Initiatives.
Advanced knowledge of Linux and Windows server administration (Group Policy Objects).
Understanding of cloud networking within Azure Gov (virtual networks, NSGs, Azure Firewall, VPN gateways, ExpressRoute).
Experience with claims‑based authentication (SAML/OAuth/OIDC) and RBAC.
Delivery using modern methodologies (SAFe Agile, Scrum, Kanban).
Strong knowledge of full‑stack development, including front‑end, back‑end and database technologies.
Documenting and designing processes; updating existing processes.
Improving practices for infrastructure and application development.
Inspiring DevSecOps teams by building consensus and mediating compromises.
A desire to automate everything and know when not to.
Qualifications
Bachelor’s degree in computer science, IT or equivalent work experience.
More than 5 years of engineering experience with private/public cloud IaaS, PaaS and SaaS platforms.
Ability to obtain and maintain Top Secret security clearance.
5+ years of functional knowledge of programming, scripting and data science languages (PowerShell, SQL, etc.).
5+ years CI/CD delivery experience using code management, configuration management and automation tools (Bicep, Azure DevOps Server, Ansible, ARM Templates).
Experience with Azure AD/Microsoft Entra.
Experience with hardened OS images such as DISA STIG.
Basic understanding of Government Security Framework such as NIST Controls.
Experience with containerization and orchestration platforms (Kubernetes, ACA, Docker).
Proficiency in Windows Server Administration (Group Policy Objects via Ansible CLI).
Knowledge of Linux server administration.
Strong cloud security controls knowledge (tenant isolation, encryption, key management, SIEM).
Experience with SAFe Agile, Scrum or Kanban.
Fluent communication in English, written and verbal.
Excellent interpersonal and organizational skills.
Demonstrated engineering and automation expertise in cloud delivery with CI/CD.
Rapid learning of new technologies and ability to define engineering standards.
Experimentation and surfacing of new methods and processes to accelerate secure solution delivery.
Preferred Experience
Source control management (Git).
Azure cloud experience/knowledge.
Scripting (PowerShell or Python).
Azure DevOps Pipelines.
Agile methodology.
Ansible/Bicep.
Azure Policy.
Azure multi‑tenant knowledge.
Certifications
AZ‑104, AZ‑400, AZ‑500, AZ‑700.
Certified Kubernetes Networking Specialist (CKNS).
Red Hat Certified Specialist in Ansible Automation.
Certified Kubernetes Administrator (CKA).
Certified Kubernetes Application Developer (CKAD).
What We Offer At EY, we’ll develop you with future‑focused skills and equip you with world‑class experiences. We’ll empower you in a flexible environment and fuel your extraordinary talents in a diverse, inclusive culture of globally connected teams.
Comprehensive compensation and benefits package reflecting performance and value.
Base salary range in the US: $89,600 – $167,600; NYC – $107,600 – $190,500; Washington and California – $107,600 – $190,500; plus wide variety of paid time off options.
Hybrid model: expectation to work in person 40‑60% of the time over the course of a project or engagement.
Flexible vacation policy allowing you to decide how much time off you need.
Designated EY Paid Holidays, winter/summer breaks, personal/family care and other leave options.
Equal Employment Opportunity EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status or any other legally protected basis, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities, including veterans. If you have a disability and need assistance applying online or require an accommodation during any part of the application process, please contact 1‑800‑EY‑HELP3 (Option 2 for candidate related inquiries, then Option 1). Alternatively, email ssc.customersupport@ey.com.
Company Commitment EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. We use data, AI and advanced technology to help clients shape the future with confidence. Our team works across assurance, consulting, tax, strategy and transactions services with a globally connected network.
Seniority Level
Mid‑Senior level
Employment Type
Full‑time
Job Function
Engineering and Information Technology
Professional Services
EY accepts applications for this position on an ongoing basis.
#J-18808-Ljbffr
Key Responsibilities
Design and maintain Infrastructure as Code (IaC) for scalable and secure cloud environments using Bicep and ARM templates.
Engineer, automate and deploy platform solutions (Infrastructure & Application) to meet and exceed Product Managers’ expectations.
Build and deploy CI/CD pipelines using tools such as Azure DevOps Server, GIT, Helm and Ansible Command Line Interface (CLI).
Package and deploy containerized applications (e.g., Kubernetes, Azure Container Apps—ACA, Docker, Helm).
Implement application code packaging, deployment strategies and container orchestration.
Develop and manage base container images and support hardened OS images (e.g., DISA STIG).
Proactively evolve and apply DevSecOps methodologies, standards and industry best‑practice.
Independently research and remediate/troubleshoot day‑to‑day issues.
Apply modern development standards, global product‑specific guidelines, security standards and usability design principles.
Ensure quality through use of manual and automated controls.
Identify, communicate and mitigate Risks, Assumptions, Issues and Decisions throughout full lifecycle.
Use critical thinking to evaluate options, propose impactful plans and roadmaps that balance tactical and strategic needs.
Skills & Attributes for Success
Design, implementation and administration of containerized applications using Azure Kubernetes Services and other PaaS services.
Proficient in scripting with PowerShell, Python, JavaScript and Ansible.
Ability to design and improve infrastructure (IaC) and application development processes.
Strong knowledge of Azure Policies and Initiatives.
Advanced knowledge of Linux and Windows server administration (Group Policy Objects).
Understanding of cloud networking within Azure Gov (virtual networks, NSGs, Azure Firewall, VPN gateways, ExpressRoute).
Experience with claims‑based authentication (SAML/OAuth/OIDC) and RBAC.
Delivery using modern methodologies (SAFe Agile, Scrum, Kanban).
Strong knowledge of full‑stack development, including front‑end, back‑end and database technologies.
Documenting and designing processes; updating existing processes.
Improving practices for infrastructure and application development.
Inspiring DevSecOps teams by building consensus and mediating compromises.
A desire to automate everything and know when not to.
Qualifications
Bachelor’s degree in computer science, IT or equivalent work experience.
More than 5 years of engineering experience with private/public cloud IaaS, PaaS and SaaS platforms.
Ability to obtain and maintain Top Secret security clearance.
5+ years of functional knowledge of programming, scripting and data science languages (PowerShell, SQL, etc.).
5+ years CI/CD delivery experience using code management, configuration management and automation tools (Bicep, Azure DevOps Server, Ansible, ARM Templates).
Experience with Azure AD/Microsoft Entra.
Experience with hardened OS images such as DISA STIG.
Basic understanding of Government Security Framework such as NIST Controls.
Experience with containerization and orchestration platforms (Kubernetes, ACA, Docker).
Proficiency in Windows Server Administration (Group Policy Objects via Ansible CLI).
Knowledge of Linux server administration.
Strong cloud security controls knowledge (tenant isolation, encryption, key management, SIEM).
Experience with SAFe Agile, Scrum or Kanban.
Fluent communication in English, written and verbal.
Excellent interpersonal and organizational skills.
Demonstrated engineering and automation expertise in cloud delivery with CI/CD.
Rapid learning of new technologies and ability to define engineering standards.
Experimentation and surfacing of new methods and processes to accelerate secure solution delivery.
Preferred Experience
Source control management (Git).
Azure cloud experience/knowledge.
Scripting (PowerShell or Python).
Azure DevOps Pipelines.
Agile methodology.
Ansible/Bicep.
Azure Policy.
Azure multi‑tenant knowledge.
Certifications
AZ‑104, AZ‑400, AZ‑500, AZ‑700.
Certified Kubernetes Networking Specialist (CKNS).
Red Hat Certified Specialist in Ansible Automation.
Certified Kubernetes Administrator (CKA).
Certified Kubernetes Application Developer (CKAD).
What We Offer At EY, we’ll develop you with future‑focused skills and equip you with world‑class experiences. We’ll empower you in a flexible environment and fuel your extraordinary talents in a diverse, inclusive culture of globally connected teams.
Comprehensive compensation and benefits package reflecting performance and value.
Base salary range in the US: $89,600 – $167,600; NYC – $107,600 – $190,500; Washington and California – $107,600 – $190,500; plus wide variety of paid time off options.
Hybrid model: expectation to work in person 40‑60% of the time over the course of a project or engagement.
Flexible vacation policy allowing you to decide how much time off you need.
Designated EY Paid Holidays, winter/summer breaks, personal/family care and other leave options.
Equal Employment Opportunity EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status or any other legally protected basis, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities, including veterans. If you have a disability and need assistance applying online or require an accommodation during any part of the application process, please contact 1‑800‑EY‑HELP3 (Option 2 for candidate related inquiries, then Option 1). Alternatively, email ssc.customersupport@ey.com.
Company Commitment EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. We use data, AI and advanced technology to help clients shape the future with confidence. Our team works across assurance, consulting, tax, strategy and transactions services with a globally connected network.
Seniority Level
Mid‑Senior level
Employment Type
Full‑time
Job Function
Engineering and Information Technology
Professional Services
EY accepts applications for this position on an ongoing basis.
#J-18808-Ljbffr