Sr. Cloud Infrastructure Engineer, Managed Services (W2 Contract)

Position Overview

We are CARIAD – an automotive software development team with the Volkswagen Group – on a mission to make the automotive experience safer, more sustainable, more comfortable, more digital, and more fun. As the Sr. Cloud Infrastructure Engineer, Managed Services (W2 Contract), you will architect and deploy CARIAD’s Managed IT Services Platform on Microsoft Azure – a secure, scalable, multi-tenant environment. In this role, you will define the platform’s technical foundation using Infrastructure as Code (Terraform and ARM templates) and integrate tools such as Azure Lighthouse and SailPoint IdentityNow to automate identity and access management.

This is a contract W2 position with a hybrid office schedule. Preferred locations are Mountain View, CA or Bellevue, WA. Off-hours work during critical deployments may be required.

Key Responsibilities

• Architect and deploy a secure, scalable, multi-tenant Azure platform using Azure Lighthouse for centralized control and tenant isolation.
• Integrate SailPoint IdentityNow for IAM provisioning and lifecycle governance.
• Develop and maintain reusable landing zones, reference architectures, and Infrastructure as Code (IaC) using Terraform and ARM templates.
• Integrate IaC into CI/CD pipelines, standardize tagging and configuration management, and use security validation tools (e.g., tfsec, Checkov).
• Implement Azure security measures including RBAC, PIM, Zero Trust models, and enforce secure access policies (JIT, NSGs, Key Vault secrets).
• Monitor platform health, manage tenant provisioning and onboarding, troubleshoot infrastructure issues, and support BAU operations.
• Follow ITSM best practices for change control, incident resolution, and participate in CAB meetings and RCA for critical issues.

Required Qualifications

• Bachelor’s degree in Computer Science, IT, or equivalent hands-on experience.
• 8+ years in cloud infrastructure or platform engineering with 4+ years of Microsoft Azure experience in multi-tenant or enterprise-scale deployments.
• Strong scripting skills in Powershell.
• Hands-on expertise in Azure Lighthouse, Terraform, and ARM Templates.
• Experience integrating IaC into CI/CD pipelines (GitHub Actions, Azure DevOps, etc.).
• Proficient in Azure security practices including RBAC, PIM, Policies, Key Vault, and Zero Trust models.
• Familiarity with security testing tools such as tfsec and Checkov.
• Strong communication skills and ability to work independently as a contractor.

Preferred Qualifications

• Experience in regulated industries (automotive, OEMs, or similar).
• Certifications such as Microsoft Certified: Azure Administrator Associate, HashiCorp Certified: Terraform Associate, AZ-500: Microsoft Azure Security Technologies, and ITIL Foundation Certification.

Benefits & Perks

• Compensation: Hourly range of $90 - $135/hr in Mountain View, CA (may vary based on geographical differentials, credentials, and experience).
• Hybrid office schedule with preferred locations in Mountain View, CA or Bellevue, WA.
• Opportunity to work with cutting-edge automotive technologies and a global leader in the industry.
• CARIAD is an Equal Opportunity Employer welcoming applicants from all backgrounds.