B
BAE Systems, Inc.Remote
Windows DevOps Cloud Engineer
United States of America
Full Time
6 hours ago
$121,000 - $205,000 USD
H1B Sponsor LikelyKey skills
Windows Server 2016Windows Server 2019Windows Server 2022Windows Server 2025Azure DevOpsAzure App ServicesAzure Key VaultAzure StorageAzure NetworkingAzure MonitorPowerShellREST scriptingCI/CD principlesDevSecOps practicesInfrastructure as Code ARMInfrastructure as Code BicepInfrastructure as Code TerraformWindows Security PoliciesGroup Policy Objects (GPOs)Root cause analysisAzure or AWS CertificationsCMMC complianceNIST 800-171NIST 800-53Hybrid Cloud environmentVCF (Aria) AutomationTCP/IPDHCPDNSFirewallsVLAN segmentationDell PowerEdge serversDell OpenManage EnterpriseTanium endpoint managementAWSAzureTerraformDockerVaultAKSCI/CD
About this role
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company. The Windows DevOps Cloud Engineer role focuses on bridging traditional Windows Server operations with modern cloud-native delivery, leading cloud migration, automation, and CI/CD pipeline development for Azure while ensuring infrastructure stability and security.
Responsibilities:
- Lead the migration of data and services from legacy Windows systems to modern cloud or virtualized platforms, ensuring data integrity and seamless transitions
- Design, build, and maintain Azure DevOps CI/CD pipelines (YAML and classic) to automate server provisioning, configuration, and lifecycle management across development, test, and production environments
- Manage and optimize Azure infrastructure deployments using ARM/Bicep templates, Terraform, or similar IaC tools to replace manual administrative processes
- Write, debug, and maintain advanced PowerShell scripts to automate repetitive system administration tasks and integrate heterogeneous tools
- Ensure adherence to security standards, including CMMC controls, DoD STIGs, CIS Benchmarks, and IAVM requirements
- Design and maintain Windows Servers and containerized workloads (AKS, Docker, Tanzu) in a Cloud environment
- Manage real-time endpoint visibility, vulnerability management, and automated orchestration of monthly patching cycles using Tanium to maintain high compliance and operational continuity
- Partner with cross-functional cybersecurity and development teams to resolve complex technical issues and provide technical guidance to junior engineers
- Stay current on emerging technologies and trends, proactively expanding knowledge and skills through self‑study and formal training
Requirements:
- 12+ years of experience in Windows Server Operations and Cloud Automation with HS Diploma, OR 10+ years with AA, OR 8+ years with BS
- Proven experience designing and maintaining Azure/cloud DevOps pipelines, with hands‑on familiarity across Azure services such as App Services, Key Vault, Storage, Networking, and Azure Monitor
- Demonstrated expertise with scripting languages (PowerShell, REST, etc.), CI/CD principles, DevSecOps practices, and Infrastructure‑as‑Code technologies including ARM, Bicep, and Terraform
- In-depth knowledge of Windows Server (2016, 2019, 2022, 2025), Security Policies, and Group Policy Objects (GPOs)
- Strong ability to analyze complex issues, perform root‑cause analysis on pipeline or system failures, and manage high‑priority incidents
- Demonstrated ability to work autonomously, balance multiple priorities, and meet demanding deadlines
- Azure or AWS Certifications including Azure Solution Architect Expert, Azure Administrator Associate, DevOps Engineer, AWS Solution Architect Professional, AWS CloudOps Engineer, AWS Developer or other related certifications
- Experience with CMMC, NIST 800-171, NIST 800-53 or similar compliance frameworks
- Experience maintaining endpoint consistency in a Hybrid Cloud environment
- Experience with VCF (Aria) Automation and Operations or similar cloud management platforms
- Strong understanding of TCP/IP, DHCP, DNS, firewalls, and VLAN segmentation
- Working knowledge of Dell PowerEdge servers and Dell OpenManage Enterprise
- Practical experience using Tanium for endpoint visibility, patching, and security compliance