Windows DevOps Cloud Engineer

Job Description
About BAE Systems
At BAE Systems, you don’t have to choose between cutting-edge technology and a balanced life. We empower our people to drive innovation by supporting the businesses and platforms that define the future of national security. We pair this high-impact mission with a culture of trust, camaraderie, and true flexibility, ensuring you have the support you need to perform at your best. Join a collaborative team where your growth is prioritized and your work enables global progress.

Job Description
We are seeking a highly motivated Cloud Engineer to join our Windows Server Operations team. This critical role bridges the gap between traditional Windows Server operations and modern cloud‑native delivery. You will be responsible for ensuring the stability, security, and performance of our Windows infrastructure while leading efforts in cloud migration, CI/CD automation, and secure lifecycle management.

The ideal candidate has a strong background in Windows Server administration and a proven track record of migrating and modernizing legacy workloads into Azure. They leverage Infrastructure‑as‑Code (IaC) and automated pipelines to drive operational efficiency across a hybrid cloud environment.

Key Responsibilities

• Cloud Modernization & Migration: Lead the migration of data and services from legacy Windows systems to modern cloud or virtualized platforms, ensuring data integrity and seamless transitions.
• Automation & CI/CD: Design, build, and maintain Azure DevOps CI/CD pipelines (YAML and classic) to automate server provisioning, configuration, and lifecycle management across development, test, and production environments.
• Infrastructure as Code (IaC): Manage and optimize Azure infrastructure deployments using ARM/Bicep templates, Terraform, or similar IaC tools to replace manual administrative processes.
• Advanced Scripting: Write, debug, and maintain advanced PowerShell scripts to automate repetitive system administration tasks and integrate heterogeneous tools.
• Security & Compliance: Ensure adherence to security standards, including CMMC controls, DoD STIGs, CIS Benchmarks, and IAVM requirements.
• Infrastructure Support: Design and maintain Windows Servers and containerized workloads (AKS, Docker, Tanzu) in a Cloud environment.
• Automated Endpoint Management: Manage real-time endpoint visibility, vulnerability management, and automated orchestration of monthly patching cycles using Tanium to maintain high compliance and operational continuity.
• Collaboration & Leadership: Partner with cross-functional cybersecurity and development teams to resolve complex technical issues and provide technical guidance to junior engineers.