Cloud & Infrastructure Engineer

Cloud & Infrastructure Engineer

Safran is an international high‑technology group, operating in the aviation (propulsion, equipment and interiors), defense and space markets. Its core purpose is to contribute to a safer, more sustainable world, where air transport is more environmentally friendly, comfortable and accessible. Safran has a global presence, with 100,000 employees and sales of 27.3 billion euros in 2024, and holds, alone or in partnership, world or regional leadership positions in its core markets.

Safran is in the 2nd place in the aerospace and defense industry in TIME magazine's "World's best companies 2024" ranking.

Entity Safran

Reference number 2026‑182015

Domain Performance and Support

Job field / Job profile IT – IT operations management

Job title Cloud & Infrastructure Engineer

Employment type Permanent

Professional category Professional, Engineer & Manager

Part time / Full time Full‑time

The Cloud & Infrastructure Engineer is a hands‑on technical role responsible for the day‑to‑day operation of Safran USA's hybrid infrastructure across defined primary domains, while supporting peers in adjacent areas. The role sits within a small, highly capable team and operates within a CMMC Level 2 / ITAR‑regulated shared services environment supporting multiple Safran aerospace subsidiaries. The right candidate owns their domains with discipline, supports CMMC compliance activities operationally, and grows into cloud operations as Safran USA expands its AWS Gov Cloud footprint.

• 4–6 years of hands‑on enterprise infrastructure engineering experience across two or more of the primary domains listed above.
• Privileged access management platform — Cyber Ark, Beyond Trust, or equivalent. Must be able to describe vault structure, session recording, and access review processes personally configured.
• Enterprise MFA platform — hands‑on administration of Cisco DUO, Okta, Azure MFA, or equivalent. Must be able to describe policy configuration and AD integration personally managed.
• Microsoft 365 administration — Exchange, SharePoint, Teams, Purview, Defender. GCC High experience preferred.
• AWS hands‑on experience — EC2, IAM roles and policies, VPC, S3, Cloud Watch. Must describe specific configurations personally built or managed.
• VMware vSphere / ESXi operational management.
• Windows Server and Active Directory administration — GPO, DNS, identity management.
• Enterprise backup and disaster recovery operations — backup job management, restore execution, and DR testing.
• Strong troubleshooting skills and discipline to follow controlled change management processes.

Design, implement, and maintain Safran USA's hybrid infrastructure spanning on‑premises datacenter systems, AWS Gov Cloud, and Microsoft 365 GCC High. Develop and maintain architecture documentation, configuration baselines, and operational runbooks for all systems in scope. Ensure high availability, security, and performance of critical systems in a shared services environment supporting multiple Safran aerospace subsidiaries.

Administer Safran USA's Microsoft 365 Government Community Cloud High (GCC High) tenant across the full suite of services — Exchange Online, Teams, SharePoint, One Drive, Entra , and Intune. Responsibilities include identity governance, Conditional Access policy management, MFA enforcement, and endpoint management consistent with CMMC and ITAR requirements.

Configure and maintain Purview compliance center — audit logging, DLP policies, retention labels, and sensitivity labels. Administer Defender for Office 365 threat policies and alert routing. Support Microsoft 365 GCC High licensing and governance.

Support the operation and progressive build‑out of Safran USA's AWS Landing Zone, currently under construction. Manage EC2, VPC, IAM roles and policies, S3, Cloud Watch, and Security Groups within a Gov Cloud regulated environment. Implement cloud security best practices.

Contribute to workload migration planning as Safran USA transitions on‑premises systems to AWS over…