Senior Azure Cloud & GitHub Platform Engineer (Hybrid)

Overview

The Senior Azure Cloud & GitHub Platform Engineer will design, implement, secure, automate, and support enterprise cloud and developer platforms supporting modern application delivery. This role will provide hands-on engineering and technical leadership across Microsoft Azure, Azure Kubernetes Service (AKS), identity and access management, GitHub Enterprise, CI/CD pipelines, infrastructure automation, and platform observability.

 

This position will work closely with Application Development, Platform Engineering, Information Security, Architecture, Site Reliability Engineering (SRE), and Product teams to ensure cloud and development platforms are secure, scalable, resilient, and production ready. The engineer will also help establish standardized deployment patterns, governance controls, automation frameworks, and self-service capabilities that improve developer productivity and accelerate secure software delivery.

 

This is a hands-on engineering role requiring deep technical expertise across cloud infrastructure, Kubernetes, GitHub administration, automation, and DevSecOps practices.

 

Benefits:• Comprehensive Medical, Dental, and Vision Insurance• Employer-Paid Life Insurance• Employer-Paid Short-Term and Long-Term Disability Insurance• 401(k) • Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays• Educational Assistance

 

Salary: $120-166K

 

**Hybrid in Vienna, VA**

 

**An In Person interview will be required for this role prior to offer.**

 

Click here to learn about BRMi's culture.

 

Click here to see BRMi’s Glassdoor reviews

Responsibilities

• Design, implement, administer, and support Microsoft Azure cloud platforms and enterprise application workloads.
• Deploy, configure, and maintain Azure services including Azure Kubernetes Service (AKS), Azure Service Bus, Storage Accounts, Azure Functions, App Services, Key Vault, API Management, Azure Monitor, Log Analytics, and Azure networking services.
• Design highly available, resilient, scalable, and secure cloud-native architectures that support enterprise application requirements.
• Provision, administer, upgrade, patch, secure, and optimize AKS clusters and associated Kubernetes workloads.
• Manage Kubernetes capabilities including ingress controllers, autoscaling, networking, workload security, monitoring, and observability.
• Implement and administer identity and access management solutions using Microsoft Entra ID, Role-Based Access Control (RBAC), Managed Identities, Service Principals, Conditional Access, and Privileged Identity Management (PIM).
• Establish and maintain least-privilege access models and cloud governance standards across Azure environments.
• Administer and automate GitHub Enterprise environments, including organizations, teams, repositories, repository rulesets, branch protection policies, security policies, secrets, and enterprise governance controls.
• Configure and support GitHub Apps, OAuth integrations, webhooks, enterprise authentication, and other GitHub platform integrations.
• Design, develop, and maintain CI/CD pipelines using GitHub Actions, reusable workflows, composite actions, and enterprise integrations.
• Provision, secure, scale, upgrade, and maintain GitHub-hosted and self-hosted runners.
• Implement secure workload authentication using OpenID Connect (OIDC), Managed Identities, federated credentials, and secretless authentication patterns.
• Develop and maintain Infrastructure as Code solutions using Packer and ARM templates to automate and standardize cloud infrastructure deployments.
• Integrate CI/CD pipelines with Azure cloud services, Kubernetes environments, security controls, and application deployment processes.
• Implement and support deployment strategies including blue-green deployments, canary releases, and rolling updates.
• Establish DevSecOps controls, automated quality gates, and security checks throughout the software delivery lifecycle.
• Support software supply chain security, dependency management, vulnerability remediation, and applicable compliance requirements.
• Implement and maintain monitoring, logging, alerting, and observability capabilities using Azure Monitor, Log Analytics, Application Insights, Prometheus, and Grafana.
• Troubleshoot complex issues involving Azure infrastructure, Kubernetes, identity, networking, GitHub, CI/CD pipelines, and application deployments.
• Develop automation using PowerShell, Bash, Python, and other scripting technologies to improve platform reliability and reduce manual administration.
• Create and maintain operational runbooks, architecture documentation, engineering standards, deployment proc