Sr. Staff Cloud Infrastructure Engineer, Managed Services (W2 Contract)
We are CARIAD, an automotive software development team with the Volkswagen Group. Our mission is to make the automotive experience safer, more sustainable, more comfortable, more digital, and more fun. To achieve that we are building the leading tech stack for the automotive industry and creating a unified software platform for over 10 million new vehicles per year. We’re looking for talented, digital minds like you to help us create code that moves the world. Together with you, we’ll build outstanding digital experiences and products for all Volkswagen Group brands that will transform mobility. Join us as we shape the future of the car and everyone around it.
Title: Sr. Cloud Infrastructure Engineer, Managed Services (W2 Contract)
Role Summary:
- Lead the end-to-end design, architecture, and delivery of a secure, scalable, multi-tenant Azure platform for Volkswagen Group.
- Drive adoption of Azure Lighthouse as the enterprise standard for centralized control and tenant isolation.
- Define and implement the integration of SailPoint IdentityNow (or equivalent) for IAM provisioning and lifecycle governance at global scale.
- Establish reusable landing zones, enterprise reference architectures, and global patterns to accelerate onboarding across brands.
- Influence and align senior stakeholders across engineering, InfoSec, and operations, ensuring strategic and technical alignment.
- Continuously evolve architecture by evaluating and implementing Azure innovations and industry-leading security trends.
- Own the development of enterprise-scale Terraform modules and ARM templates that serve as reusable building blocks across engineering teams.
- Govern integration of IaC into CI/CD pipelines, ensuring full lifecycle automation and compliance at scale.
- Define and enforce global standards for tagging, naming, and configuration management across tenants.
- Drive automation of shared services, network configurations, and RBAC with a focus on security and operational efficiency.
- Champion the use of security validation tools (e.g., tfsec, Checkov) in all deployment pipelines, ensuring consistent adoption across teams.
- Set and enforce enterprise-wide Azure RBAC, PIM, and Zero Trust standards across tenants.
- Lead implementation of secure access models (JIT, NSGs, Key Vault) for highly regulated and global environments.
- Define and automate security baselines using Defender for Cloud, Sentinel, and enterprise governance frameworks.
- Partner with Volkswagen Group InfoSec, audit, and compliance teams to drive alignment, pass audits, and establish repeatable governance processes.
- Own the design and governance of tenant provisioning workflows, onboarding processes, and platform integration patterns.
- Lead enterprise-level monitoring strategies, setting standards for logs, metrics, and alerts across multiple environments.
- Act as the escalation point for infrastructure troubleshooting, ensuring rapid resolution of complex issues.
- Maintain global documentation, playbooks, and support guides to ensure knowledge-sharing and operational consistency.
- Define and enforce enterprise change management frameworks aligned with ITSM best practices.
- Own technical leadership of RCA processes for critical issues, driving long-term fixes and reliability improvements.
- Represent cloud operations in CAB meetings and cross-organization escalation paths, ensuring lessons learned translate into process improvements.
- Bachelor’s degree in Computer Science, IT, or equivalent hands-on experience
- 10+ years in cloud infrastructure or platform engineering
- 6+ years in Microsoft Azure, with experience in multi-tenant or enterprise-scale deployments
- Scripting experience: Powershell
- Strong hands-on expertise in:
- Azure Lighthouse, Terraform, ARM Templates
- CI/CD pipeline integration (GitHub Actions, Azure DevOps, etc.)
- SailPoint IdentityNow or equivalent IAM platforms
- Azure security (RBAC, PIM, Policies, Key Vault, Zero Trust)
- Familiar with infrastructure security testing (e.g., tfsec, Checkov).
- Experience in regulated industries (automotive, OEMs, or similar) a plus
- Strong communication skills and ability to work independently as a contractor
- Certifications (preferred):
- Microsoft Certified: Azure Administrator Associate
- HashiCorp Certified: Terraform Associate
- AZ-500: Microsoft Azure Security Technologies
- ITIL Foundation Certification
Create a Job Alert
Interested in building your career at Cariad, Inc.? Get future opportunities sent straight to your email.
Apply for this job
*
indicates a required field