{"id":3777880,"url":"https://alion.io/job/chevron-cloud-engineer","title":"Cloud Engineer","company":{"id":5944,"name":"Chevron","domain":"chevron.com","url":"https://alion.io/company/chevron","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":11,"ghost_share":0,"stale_share":0.091,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-11-06T05:58:05Z"}},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Delinea","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"ITIL","optional":true}],"status":"live","first_seen_at":"2026-11-04T23:54:00Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-06T20:21:44Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Total Number of Openings\n1Chevron is accepting online applications for the Cloud Engineer position through November 25, 2026, at 11:59 p.m. (Central Time).\nOverview\nThis is a senior hands-on engineering role within Chevron’s Digital Identity organization responsible for designing, operating, and modernizing enterprise-scale Public Key Infrastructure (PKI) and cryptographic services across cloud and hybrid environments. The role enables secure certificate lifecycle management, key protection, and identity-driven security controls, supporting Zero Trust adoption, phishing-resistant authentication, and protection of critical business workloads.\nResponsibilities for this position may include but are not limited to:\nPKI & Certificate Services\nDesign, deploy, and manage enterprise PKI platforms (Microsoft ADCS, DigiCert, NDES, cloud-integrated services)\nOwn certificate lifecycle management (issuance, renewal, revocation, compliance, automation)\nImplement post-quantum cryptography capabilities aligned to business and regulatory requirements\nManage HSM-backed key protection and integration with key management systems\nCloud & Hybrid Identity Integration\nIntegrate PKI with Active Directory and Microsoft Entra ID for hybrid identity scenarios\nEnable certificate-based authentication for workloads, APIs, devices, VPN, and service accounts\nAlign PKI services with Azure and multi-cloud security architectures\nSecurity Engineering & Zero Trust\nImplement phishing-resistant authentication using FIDO2, PIV, and certificate-based methods\nSupport Conditional Access policies leveraging identity, device posture, and risk signals\nAdvance Zero Trust maturity and continuous security posture improvement\nPrivileged Access & Operational Security\nIntegrate PKI with PAM solutions (e.g., Delinea) for secure service account authentication\nSupport privileged access workstations and hardened admin environments\nLead break-glass and recovery scenarios using secure access controls\nAutomation, Reliability & Operations\nDrive automation using scripting, APIs, and orchestration to reduce manual processes\nLead disaster recovery exercises, upgrades, and PKI platform modernization\nProvide advanced engineering support, incident response, and root cause analysis\nLeadership & Stakeholder Engagement\nServe as a PKI subject matter expert within Digital Identity - Protection\nCollaborate across security, cloud, and operations teams\nMentor engineers and contribute to standards and operational excellence\nRequired Qualifications:\nBachelor’s degree in computer science, Information Security, Engineering, or related field (or equivalent experience)\n3-5 years in Identity & Access Management, PKI, or security infrastructure engineering\nProven experience operating large-scale enterprise PKI environments\nStrong understanding of cryptography, authentication, and trust models\nHands-on expertise with PKI platforms, HSM, key management, automation, Active Directory, and Microsoft Entra ID\nPreferred Qualifications:\nIndustry certifications in security or cloud (e.g., CISSP, Azure Security)\nExperience in regulated industries such as oil & gas or energy\nKnowledge of Zero Trust architecture, Conditional Access, and identity security engineering\nFamiliarity with ITIL and operational processes in regulated environments\nRelocation Options\nRelocation will be considered.\nInternational Considerations\nExpatriate assignments will not be considered.\nChevron regrets that it is unable to sponsor employment Visas or consider individuals on time-limited Visa status for this position.\nU.S. Regulatory notice:\nChevron is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, sex (including pregnancy), sexual orientation, gender identity, gender expression, national origin or ancestry, age, mental or physical disability, medical condition, reproductive health decision-making, military or veteran status, political preference, marital status, citizenship, genetic information or other characteristics protected by applicable law.\nWe are committed to providing reasonable accommodations for qualified individuals with disabilities. If you need assistance or an accommodation, please email us at .\nChevron participates in E-Verify in certain locations as required by law.","description_format":"text","description_chars":4362,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Energy & Utilities","Natural Resources","Fossil Fuels","Oil & Gas"],"lifecycle":[{"event":"open","at":"2026-11-04T23:54:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 22 · green card filings: 6","filings_12m":22,"filings_prev_12m":24,"green_card_filings_12m":6,"median_offered_wage_usd":165357,"route":null,"cap_exempt":false,"checked_at":"2026-11-06T21:34:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":19,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/chevron-cloud-engineer","json_url":"https://alion.io/job/chevron-cloud-engineer.json","meta":{"generated_at":"2026-11-06T21:59:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3203,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5944},"rest":"https://alion.io/mcp/rest/get_company?id=5944"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fchevron-cloud-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fchevron-cloud-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fchevron-cloud-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/chevron-cloud-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fchevron-cloud-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3777880}},{"tool":"search_jobs","arguments":{"company":"chevron.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3777880},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}