Cloud & Infrastructure Engineer

The Cloud & Infrastructure Engineer is a hands‑on technical role responsible for the day‑to‑day operation of Safran USA's hybrid infrastructure across defined primary domains, while supporting peers in adjacent areas. The role sits within a small, highly capable team and operates within a CMMC Level 2 / ITAR‑regulated shared services environment supporting multiple Safran aerospace subsidiaries. The candidate owns domains, supports compliance, and grows into cloud operations as the AWS Gov Cloud footprint expands.

Design, implement, and maintain Safran USA's hybrid infrastructure spanning on‑premises datacenter systems, AWS Gov Cloud, and Microsoft 365 GCC High. Develop and maintain architecture documentation, configuration baselines, and operational runbooks for all systems in scope. Ensure high availability, security, and performance of critical systems in a shared services environment supporting multiple Safran aerospace subsidiaries.

Administer Safran USA's Microsoft 365 Government Community Cloud High (GCC High) tenant across the full suite of services — Exchange Online, Teams, SharePoint, One Drive, Entra , and Intune. Responsibilities include identity governance, Conditional Access policy management, MFA enforcement, and endpoint management consistent with CMMC and ITAR requirements. Configure and maintain Purview compliance center — audit logging, DLP policies, retention labels, and sensitivity labels.

Administer Defender for Office 365 threat policies and alert routing. Support Microsoft 365 GCC High licensing and governance.

Support the operation and progressive build‑out of Safran USA's AWS Landing Zone, currently under construction. Manage EC2, VPC, IAM roles and policies, S3, Cloud Watch, and Security Groups within a Gov Cloud regulated environment. Implement cloud security best practices. Contribute to workload migration planning as Safran USA transitions on‑premises systems to AWS over the 2026–2027 timeframe.

Administer Safran USA's VMware vSphere / ESXi environment across the datacenter — VM provisioning, snapshot governance, host health monitoring, resource allocation, and patching. Manage Windows Server environments including configuration baselines and lifecycle management. Work alongside the Systems Engineer to maintain operational continuity and support disaster recovery exercises.

Privileged Access Management — administer Safran USA's PAM platform— vault structure, privileged session management, session recording, credential vaulting, access reviews, and break‑glass procedures. Cisco DUO Federal MFA — administer user enrollment, device management, policy enforcement, and AD integration.

Contribute to infrastructure health monitoring using Solar Winds NPM/SAM alongside the Systems Engineer. Review alerts, triage operational issues, and escalate appropriately. Support Solar Winds SEM log review and alerting. Maintain operational awareness of server, application, and cloud performance across owned domains.

Responsible for compliance and governance activities in alignment with CMMC and ITAR requirements.

Responsible for backup strategies, disaster recovery planning, testing, and execution to ensure business continuity.