Principal Cloud Platform Lead

Osaic Careers

Azure Platform & DevOps Engineering Opportunity in Financial Services Principal Cloud Platform Lead

Location(s):

Atlanta: 2300 Windy Ridge Pkwy SE, Suite 750, Atlanta, GA 30339 La Vista: 12325 Port Grace Blvd, La Vista, NE 68128 Oakdale: 7755 3rd St. N, Oakdale, MN 55128 Scottsdale: 18700 N Hayden Rd, Suite 255, Scottsdale, AZ 85255 St. Petersburg: 877 Executive Center Dr. W, Suite 300, St. Petersburg, FL 33702

Osaic has returned to the office on a hybrid schedule requiring a minimum of 4 days weekly in the office. Applicants should be located at one of our hubs listed above and must be willing to work this schedule.

Role Type: Full-time, Exempt

Salary: $130,000 – $150,000 per year + annual performance-based bonus Actual compensation offered will be determined individually, based on a number of job-related factors, including location, skills, licensure, experience, and education.

Our competitive compensation is just one component of Osaic’s total compensation package. Additional benefits include health, vision, dental insurance, 401k, paid time away, volunteer days and much more. To view more details of what you can look forward to, visit our careers page: Osaic Benefits.

Summary:

The Principal Cloud Platform Lead role supports the VP of Cloud Infrastructure in guiding a combined Azure Platform Engineering and Azure DevOps team responsible for our Azure landing zone, cloud infrastructure, and CI/CD delivery pipelines, and serves as a senior technical resource for the Azure platform as workloads move from on-premises data centers to Azure, helping drive the build-out of Agentic DevOps on GitHub. The Principal Cloud Platform Lead helps the VP of Cloud Infrastructure coordinate the work of approximately nine contract engineers, supporting work intake, prioritization, and delivery tracking, while helping shape technical direction, standards, and governance for both DevOps and Azure platform functions. This is a non-managerial role with no direct reports, combining technical leadership and coordination with hands-on involvement in architecture review, technical escalations, and key platform decisions.

Education Requirements:

Bachelor’s degree preferred, high school diploma (or equivalent) in combination with significant experience will be considered in lieu of degree. Minimum of high school diploma or equivalent is required.

Responsibilities:

What This Role Will Help Drive:

• Coordination and delivery of a combined DevOps and Azure Platform Engineering contractor team.
• The design, governance, and evolution of the enterprise Azure landing zone, and the migration of on-premises data center workloads to Azure.
• Standardization of CI/CD and platform practices across technology stacks and application teams.
• Modernization of the software delivery toolchain to enable Agentic DevOps: moving source code from on-premises Azure DevOps Server to GitHub, where AI coding agents, agentic code review, and GitHub Advanced Security can operate directly on our repositories, and moving pipelines and work management to Azure DevOps Services (cloud).
• Knowledge retention and documentation, so platform expertise stays with the company as contractors rotate.
• Cross-functional collaboration to accelerate delivery while strengthening platform reliability and security.

Contractor Team Coordination

• Help the VP of Cloud Infrastructure coordinate the work of approximately nine contract engineers spanning DevOps Engineering and Azure Platform Engineering disciplines.
• Support work intake, prioritization, and workload balancing across the contractor team, including sprint planning in Azure DevOps Boards.
• Recommend team structure and role clarity to the VP of Cloud Infrastructure, including how DevOps and Azure Platform responsibilities are divided and coordinated within the group.
• Help define delivery goals and service levels, review contractor output for quality and adherence to standards, and support delivery reporting to the VP of Cloud Infrastructure and senior leadership.
• Ensure contractor work is documented and handed off cleanly, through runbooks, architecture records, and knowledge transfer, so platform knowledge is retained when contractors change.

DevOps Strategy & Governance

• Help define and evolve DevOps standards, CI/CD best practices, governance frameworks, and deployment workflows across .NET, Java, and microservices applications.
• Guide the team's use of GitHub for source control and Azure DevOps Services Pipelines (YAML and classic), Artifacts, and Boards to standardize and scale delivery.
• Drive adoption of Infrastructure-as-Code (Terraform and/or Bicep) and cloud-native delivery patterns, including reusable pipeline templates and self-service "paved road" capabilities for application teams.
• Partner with Architecture and Development leadership to streamline software delivery and reduce release friction.
• Support the VP of Cloud Infrastructure on the migration off on-premises Azure DevOps Server: move repositories (with history) to GitHub; move pipelines, backlog items, and boards to Azure DevOps Services; reconnect pipelines to GitHub repositories; convert classic pipelines to YAML where practical; and retire the on-premises server.
• Drive access cleanup across the DevOps toolchain as part of the migration: remove stale and excessive permissions, map access to Microsoft Entra ID groups on a least-privilege basis, and set up GitHub and Azure DevOps Services permission models that hold up to audit review.
• Plan the migration in waves with application teams, keeping release disruption to a minimum and providing clear cutover, rollback, and communication plans.
• Build out Agentic DevOps on GitHub as a primary outcome of the repository migration: roll out and scale GitHub Copilot capabilities, including coding agents, agent mode, and agentic code review, so AI agents can take on well-defined development, maintenance, and remediation work under human review.
• Help establish the governance model for AI agents in a regulated environment, including Copilot enterprise policies and model controls, approved MCP server integrations, agent permissions and sandboxing, required human pull request approval, separation of duties, and audit logging of agent activity.
• Build and maintain reusable, version-controlled agent assets (repository instructions, custom agents, prompt files, and skills) that encode our coding standards, architecture patterns, and security requirements.
• Ensure agent-generated changes pass the same CI/CD quality gates, code scanning, secret scanning, and dependency checks as human-written code, using GitHub Advanced Security and Azure Pipelines.
• Track Copilot adoption, usage-based costs, and delivery impact, and report value realized to senior leadership.

Azure Platform Engineering

• Help guide the team's work on core Azure services, including App Services, VMs, AKS, ACR, Storage, Networking, and Key Vault.
• Help the VP of Cloud Infrastructure shape the Azure landing zone architecture and lifecycle, including management group hierarchy, subscription vending, hub-and-spoke or Virtual WAN networking, and Azure Policy guardrails, aligned to the Microsoft Cloud Adoption Framework and Well-Architected Framework.
• Guide decisions on cost optimization, scalability, reliability, and security posture across the Azure environment.
• Help establish FinOps practices, including tagging standards, budgets and alerts, reservations and savings plans, and show back/chargeback, and support the Azure consumption forecast in partnership with Finance.
• Support platform capacity planning, patch and update strategy, and lifecycle management for Azure infrastructure.
• Help establish disaster recovery and business continuity standards for Azure workloads, including defined RTO/RPO targets, backup governance, and regular failover testing.
• Drive the platform workstreams of the data center-to-Azure migration, including landing zone readiness, hybrid connectivity, workload cutover support, and decommissioning of legacy infrastructure.
• Ensure monitoring, logging, and alerting (App Insights, Log Analytics, Azure Monitor) provide the team with proactive visibility into platform health.

Security, Risk & Compliance

• Ensure DevSecOps practices are embedded in pipelines, including secrets management, secure build processes, and image/container scanning.
• Maintain alignment with regulatory requirements applicable to a financial services environment, including audit and recordkeeping obligations.
• Support role-based access control, identity governance (Microsoft Entra ID, Privileged Identity Management, managed identities), and policy enforcement (Azure Policy) across DevOps tooling and Azure resources.
• Ensure the team's practices support SOC/SEC/FINRA audit readiness and internal risk requirements.

Cross-Functional & Vendor Coordination

• Help the VP of Cloud Infrastructure represent the DevOps and Azure Platform functions in cross-departmental planning, budgeting, and roadmap discussions.
• Support the VP of Cloud Infrastructure in managing relationships with staffing vendors and technology partners supporting DevOps tooling or Azure infrastructure, including contractor staffing levels, onboarding and timely access removal, and statement-of-work (SOW) deliverables.
• Partner with other engineering managers and directors to align platform strategy with broader technology and business goals.

Basic Requirements:

• 10+ years of experience in DevOps, Site Reliability Engineering, Cloud/Platform Engineering, or Build/Release Engineering, including 3+ years in a technical lead role coordinating engineering work (contractor, vendor, or employee teams).
• Proven experience coordinating work across contractor or vendor engineering teams, including work prioritization, delivery tracking, and quality review of technical output.
• Strong working knowledge of Azure DevOps (Server and Services) Pipelines, Artifacts, and Boards, and of GitHub (Enterprise) for source control and repository governance.
• Hands-on background with Azure infrastructure and platform services (compute, networking, storage, identity, PaaS).
• Experience designing or operating an Azure landing zone, including management groups, Azure Policy, hub-and-spoke or Virtual WAN networking, and Microsoft Entra ID–based access control.
• Working knowledge of Infrastructure-as-Code (Terraform and/or Bicep) sufficient to set standards and review team output.
• Familiarity with containerization (Docker) and container orchestration (AKS or similar).
• Understanding of .NET and/or Java build and deployment workflows.
• Working knowledge of scripting/automation languages (PowerShell, Bash, YAML) sufficient to guide and review team output.
• Experience implementing or supporting monitoring/observability frameworks.
• Working knowledge of GitHub Copilot and AI-assisted/agentic development practices, including the security and governance considerations of using AI agents in software delivery.
• Excellent communication, prioritization, and cross-functional collaboration skills.

Preferred Requirements:

• Experience working across teams that support both application delivery (DevOps) and infrastructure/platform engineering.
• Experience leading large-scale migration of on-premises data center workloads to Azure.
• Experience leading migrations from Azure DevOps Server to Azure DevOps Services and/or GitHub, including repository, pipeline, and work-item migration.
• FinOps experience (tagging, budgeting, reservations/savings plans, show back/chargeback); FinOps Certified Practitioner a plus.
• Hands-on experience rolling out GitHub Copilot or other AI coding agents at enterprise scale, including policy controls, MCP integrations, adoption programs, and measuring productivity impact.
• Familiarity with GitOps practices (Flux, Argo CD) or broader SRE methodology.
• Certifications such as Microsoft Certified: DevOps Engineer Expert (AZ-400), Azure Solutions Architect Expert (AZ-305), GitHub Copilot (GH-300), GitHub Advanced Security (GH-500), or similar.
• Experience working in a regulated industry, particularly financial services (FINRA/SEC).

Success Metrics:

Delivery & Platform Performance

• Deployment frequency and change failure rate across CI/CD pipelines (standard DevOps health metrics - DORA-aligned)
• Mean time to recovery (MTTR) for platform/pipeline incidents
• % of infrastructure managed as code vs. manually configured
• Azure cost trend relative to workload growth (cost optimization without sacrificing reliability)
• Data center-to-Azure migration progress against plan (workloads landed in the landing zone; legacy infrastructure decommissioned)
• Toolchain migration progress against plan (repositories moved to GitHub; pipelines and work items moved to Azure DevOps Services; Azure DevOps Server retired on schedule)
• DR test results against defined RTO/RPO targets for critical workloads
• Agentic DevOps adoption and impact (% of active repositories enabled for Copilot agents; agent-authored pull requests merged; change in lead time for changes; Copilot spend against budget)

Governance & Compliance

• Audit findings related to DevOps/Azure platform controls (target: zero or trending down)
• % of pipelines with security/secrets scanning enforced
• Access review results across GitHub and Azure DevOps (stale and over-privileged access removed; permissions granted through Entra ID groups rather than to individual users)
• Time to remediate critical vulnerabilities in platform or pipeline tooling
• % of agent-generated pull requests passing required human review and security gates, with agent activity fully auditable

Cross-Functional

• Stakeholder satisfaction (Development, QA, Architecture) with delivery turnaround, gathered via periodic survey or informal feedback
• On-time delivery rate for major platform initiatives (e.g., migrations, tooling rollouts) against committed timelines
• Contractor delivery: on-time completion of assigned work, rework rate, and documentation coverage across DevOps and Platform disciplines