GPS - Azure Cloud Platform Engineer - Supervising Associate

Join to apply for the GPS - Azure Cloud Platform Engineer - Supervising Associate role at EY
.

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

This is a remote opportunity that can be performed within Continental United States.

• Design cloud platform architectures and infrastructure as code for secure Azure / Azure Gov environments.
• Build Dev Sec Ops  automation and CI/CD pipelines.
• Enable containerized workloads and hardened base images at scale.
• Help teams adopt modern cloud practices without accumulating technical debt.

• Design and maintain reusable IaC (Bicep, ARM templates) for scalable, secure Azure / Azure Gov environments.
• Implement and improve Azure Policies and initiatives to enforce standards and guardrails.
• Apply modern engineering and security standards across platform components.

• Engineer, automate, and deploy platform solutions using Kubernetes, Azure Kubernetes Service (AKS), Azure Container Apps, Docker or Helm.
• Develop and maintain base container images and hardened OS images aligned to DISA STIGs and other security baselines.
• Evolve and promote Dev Sec Ops  practices across teams.

• Build and operate CI/CD pipelines using Azure Dev Ops, Git, and automation tooling such as Ansible.
• Automate repeatable infrastructure and application deployment tasks.
• Use manual and automated quality controls to ensure reliable releases.

• Troubleshoot and remediate issues in cloud and container platforms.
• Identify and communicate risks, assumptions, issues, and decisions throughout the product lifecycle.
• Document and improve processes, and collaborate closely with product managers, architects, and security teams.
• Mentor junior engineers and help build a high‑performing Dev Sec Ops  culture.

• Bachelor’s degree in Computer Science, IT, or equivalent experience.
• Microsoft Certified:
  Azure Administrator Associate (AZ-104).
• 5+ years in engineering roles working with private/public cloud IaaS, PaaS, and/or SaaS.
• Eligibility to obtain and maintain a Top Secret security clearance.
• Strong hands‑on experience with infrastructure as code and CI/CD using Bicep, Azure Dev Ops, ARM templates, or Ansible.
• Strong hands‑on experience with containers and orchestration using Docker, Kubernetes, AKS, Azure Container Apps, or Helm.
• Strong networking fundamentals: VNets, subnets, network security groups, routing, load‑balancing, hub‑and‑spoke topologies, and connectivity troubleshooting.
• Proficient in cloud security principles: shared responsibility, least privilege, identity‑driven security, network segmentation, encryption, and logging/monitoring.
• Experience managing Windows and Linux administration, patching, performance tuning, and hardening server workloads.
• Practical scripting and automation experience using Power Shell;
  Python or similar scripting languages is a plus.

• Hands‑on experience with government security frameworks such as NIST controls.
• Hands‑on delivery in Agile environments (Scrum, Kanban, SAFe, or similar).
• Strong written and verbal communication and effectiveness on distributed teams.
• Deeper hands‑on experience with Git‑based source control and branching strategies.
• Azure Dev Ops Pipelines and broader Azure platform services expertise.
• Advanced automation and configuration using Ansible and Bicep.
• Azure Policy and multi‑tenant / multi‑subscription design patterns.
• Advanced Azure networking experience: VPN Gateway or Express Route, Azure Firewall, Virtual WAN hubs, Application Gateway, or similar L7 gateways.
• Additional certifications: AZ‑400, AZ‑500, AZ‑700;
  Certified Kubernetes Administrator (CKA) or CKAD/CKNS;
  Red Hat Certified Specialist in Ansible Automation.

• Comprehensive compensation and benefits package with base salary range $89,600–$167,600 in all US locations.
• Hybrid model: 40–60% office time over the course of an engagement, project or year.
• Flexible vacation policy:…