{"id":3141318,"url":"https://alion.io/job/williams-grand-prix-technologies-senior-cloud-platform-engineer","title":"Senior Cloud Platform Engineer","company":{"id":1853694,"name":"Williams Grand Prix Technologies","domain":"williamsgptech.com","url":"https://alion.io/company/williamsgptech","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-25T05:49:26Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":80000,"max_usd":188000,"period":"year","method":"global_role_seniority_cell","sample_n":3299},"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Machine Learning","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Ansible","optional":true},{"name":"ArgoCD","optional":true},{"name":"Azure AKS","optional":true},{"name":"Checkov","optional":true},{"name":"CMMC","optional":true},{"name":"Databricks","optional":true},{"name":"GitOps","optional":true},{"name":"Helm","optional":true},{"name":"HPC","optional":true},{"name":"Kubernetes","optional":true},{"name":"NIST 800-171","optional":true},{"name":"Platform Engineering","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SLURM","optional":true},{"name":"Snowflake","optional":true},{"name":"SOC 2","optional":true},{"name":"Trivy","optional":true},{"name":"Zero Trust","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-10-22T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-23T14:34:39Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"NorthMark Strategies is a leading investment firm, combining capital, innovation, and engineering to drive long-term value. From operating complex businesses to backing breakthrough technologies, our mission is to build enduring businesses. Our team combines intelligent risk-taking, operational excellence, exceptional talent, and world-class computing capacity to create shareholder value.\nOur company offers a dynamic environment where individuals have the freedom to lead companies toward bold achievements by embracing innovation, leveraging technology, and fostering differentiated business strategies. Our values are Integrity, Ability, and Energy, and the company aims to hire individuals who possess those qualities.\nAt NorthMark Strategies, we believe the future isn’t something to hope for, it’s something to build. We don’t just invest, we create. Bringing together strategic insight and technical horsepower to deliver outcomes that endure.\nThe Position\nWe run governed infrastructure across Azure, AWS, and on-prem for multiple portfolio companies. We want a Senior Cloud Platform Engineer who works as a peer on the platform. You’ll work from design through production, troubleshoot hard problems without help, and raise our bar for automation, security, and documentation.\nWhat you will build\nPaved roads\nShared Terraform modules that teams use to get their environments: networking, storage, identity, compute, secrets, and monitoring, with secure defaults built in.\nVersioned, tested, documented modules, so a team can move to a new version without asking us.\nPolicy as code (Azure Policy, conftest, SCPs and RCPs) that catches problems at plan time, not after apply.\nSelf-service: a team fills in a short tfvars file and gets a working, compliant environment.\nProjects\nPlatform projects, from design to production, with the architect. A current example is a secure platform that shares petabyte-scale data with our portfolio companies across Azure, AWS, and on-prem.\nInfrastructure for the teams we serve: GPU capacity for machine learning, remote workspaces, and hybrid connectivity to the datacenter.\nProofs of concept that settle a design question quickly, with real numbers. This includes judging which new cloud features are worth adopting.\nThe platform itself\nLanding zones and guardrails: management groups and subscriptions in Azure; Organizations, OUs (organizational units), SCPs, RCPs, and account vending in AWS.\nNetworking: hub-and-spoke and Transit Gateway, firewalls, private endpoints and VPC endpoints, DNS, ExpressRoute, Direct Connect, and VPN.\nIdentity: Entra ID, managed identities, IAM Identity Center permission sets, cross-account roles, and workload identity federation (OIDC). No stored secrets or long-lived keys where federation is possible.\nCI/CD for infrastructure: GitHub Actions with OIDC, self-hosted runners, and plan review in every pull request.\nWhat you will also run\nBuilders run what they build. You take part in:\nthe on-call rotation for the platform, with the security team for incidents\nescalations that cross identity, networking, and pipelines: find the root cause, fix it, and write it up so it doesn’t come back\nfindings from Defender for Cloud, Security Hub, GuardDuty, and Access Analyzer, turned into preventive controls rather than one-off fixes\nmonitoring and alerting for what you ship, so that every alert has an owner\ncost tracking for your projects, with right-sizing when the numbers say so\nrunbooks, so someone else can operate what you built\nWe would rather you automate an operational task than do it twice.\nMust have\n5 or more years building cloud infrastructure in production. Deep experience in Azure or AWS, and solid working experience in the other.\nYou have built Terraform modules that other teams used. You can talk about how you versioned, tested, and released them, and what you would do differently. You are comfortable with imports, state moves, and refactors on live infrastructure.\nStrong networking: routing, DNS, private connectivity, firewalls, and hybrid links (ExpressRoute or Direct Connect, and VPN).\nIdentity and access in both clouds. Azure: Entra ID, RBAC (role-based access control), managed identities, and private-only service design. AWS: how IAM policies are evaluated, SCPs, permission boundaries, cross-account trust, and STS.\nCI/CD for infrastructure, preferably GitHub Actions with OIDC federation.\nMethodical troubleshooting using the evidence: Activity Log, CloudTrail, flow logs, and policy simulation, until you find the root cause.\nSecurity-first habits: least privilege, no secrets in code, logging, and audit by default.\nCareful production habits: you check before you change or delete, plan the rollback, and document as you go.\nYou have taken at least one infrastructure project from an empty repo to production.\nClear writing for engineers, app teams, and leadership: design docs, runbooks, and post-incident write-ups.\nNice to have\nModule testing and policy tools: Terratest, conftest or OPA, tflint, Checkov or Trivy.\nPlatform engineering: internal developer platforms, golden paths, templates, or service catalogs.\nAWS Control Tower and AFT (Account Factory for Terraform).\nEntra-to-AWS federation and single sign-on.\nKubernetes on AKS or EKS: workload identity, IRSA or Pod Identity, Helm, and GitOps tools such as Argo CD or Flux.\nGPU or HPC infrastructure: GPU VM families, schedulers such as Slurm, or high-throughput storage.\nSupporting data platforms (Snowflake, Databricks, or similar) from the infrastructure side.\nRegulated data: ITAR or EAR, CMMC or NIST 800-171, SOC 2.\nAnsible, and scripting in Python, Bash, or PowerShell.\nZero-trust network tools such as Zscaler (including TLS inspection) or Tailscale.\nCertifications: Azure Solutions Architect Expert, AWS Solutions Architect Professional, or Security Specialty.\nIt is impossible to list every requirement for, or responsibility of, any position. Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company’s needs may change over time. Therefore, the above job description is not comprehensive or exhaustive. The Company reserves the right to adjust, add to or eliminate any aspect of the above description. The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs.\nMust be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.\nBenefits & Perks:\nCompany-Paid Lunch Stipend: Lunch is provided via GrubHub\n\nCompany-Paid Benefits: 100% Employer-Paid Medical in our High Deductible Health Plan, Dental and Vision benefits for employees and their families, 16 weeks of Paid Parental Leave, Employee Assistance Program, Life insurance, Short-Term Disability and Long-Term Disability\n\n401(k): Company will match 100% of your contributions up to 6%\n\nOptional Employee-Paid Benefits: Medical insurance in our PPO plan and a variety of other benefits such as Health Savings Accounts (with Company Contribution!), Flexible Spending Accounts, Supplemental Life Insurance, Wellhub and more.\n\nTime Off: 25 days of Paid Time Off plus 12 company holidays\n\n EQUAL OPPORTUNITY EMPLOYER\nNORTHMARK STRATEGIES LLC IS AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER. THE COMPANY'S POLICY IS NOT TO DISCRIMINATE AGAINST ANY APPLICANT OR EMPLOYEE BASED ON RACE, COLOR, RELIGION, NATIONAL ORIGIN, GENDER, AGE, SEXUAL ORIENTATION, GENDER IDENTITY OR EXPRESSION, MARITAL STATUS, MENTAL OR PHYSICAL DISABILITY, AND GENETIC INFORMATION, OR ANY OTHER BASIS PROTECTED BY APPLICABLE LAW. THE FIRM ALSO PROHIBITS HARASSMENT OF APPLICANTS OR EMPLOYEES BASED ON ANY OF THESE PROTECTED CATEGORIES.","description_format":"text","description_chars":7766,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Health insurance","Life insurance","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy Storage","Precision Engineering"],"lifecycle":[{"event":"open","at":"2026-10-23T08:35:07Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":38,"reasons":["conf:39","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/williams-grand-prix-technologies-senior-cloud-platform-engineer","json_url":"https://alion.io/job/williams-grand-prix-technologies-senior-cloud-platform-engineer.json","meta":{"generated_at":"2026-10-25T08:49:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12542,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1853694},"rest":"https://alion.io/mcp/rest/get_company?id=1853694"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwilliams-grand-prix-technologies-senior-cloud-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwilliams-grand-prix-technologies-senior-cloud-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwilliams-grand-prix-technologies-senior-cloud-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/williams-grand-prix-technologies-senior-cloud-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwilliams-grand-prix-technologies-senior-cloud-platform-engineer"}]}