Senior Manager, Cloud Engineering Governance - FedRAMP

We are seeking an experienced Manager of Cloud Governance to lead a team of cloud engineers responsible for governing, securing, and optimizing our multi-cloud, multi-tenant environment. This role combines people management with hands-on technical leadership across multiple Microsoft Entra tenants, our AWS Organization, cloud policy enforcement, cost optimization, and vendor relationships. The ideal candidate will own day-to-day team operations, backlog execution, and cross-functional coordination, enabling the Director to focus on strategy and stakeholder engagement.

Responsibilities

Directly manage a small team of cloud engineers; handle hiring, coaching, performance reviews, career development, and administrative tasks (time-off, expense approvals); Facilitate team stand-ups, planning, and backlog refinement; break down Director-defined initiatives into well-scoped, actionable work items with the team; Produce weekly status reports for leadership covering progress, blockers, and upcoming priorities; Serve as primary point of contact for cloud governance requests, escalations, and issues from Engineering and other departments; collect requirements and feedback when implementing new systems, guardrails, or CSP configurations; communicate policy changes and best practices to development teams; Develop, implement, and enforce cloud governance frameworks and policies across Azure, AWS, and SaaS platforms to meet regulatory and industry requirements; Define and manage RBAC, tagging, and naming standards across cloud service providers; Create and enforce policies using IaC and policy-as-code tooling (e.g., Azure Policy, AWS SCPs, Cloud Custodian, Terraform); design break-glass access and JIT privilege elevation workflows; Oversee multiple Microsoft Entra tenants used by Engineering and other departments, including cross-tenant synchronization, identity lifecycle management (provisioning, deprovisioning, attribute-based scoping), and SAML/OIDC authentication for SaaS applications and CSPs; Oversee hardware security key (YubiKey) lifecycle management - procurement, provisioning, and phishing-resistant authentication policies - for the FedRAMP environment; Conduct security assessments and audits; perform root cause analysis on governance-related incidents; support compliance initiatives in regulated and compliance-heavy environments, including audit readiness and evidence collection; Manage vendor relationships for cloud service providers and SaaS platforms within a shared responsibility model - including billing, contract negotiation, authentication configuration, and delegation to end users; Monitor cloud usage and spending; identify and implement cost optimization strategies; evaluate licensing models and SKU options; provide regular reports on cloud costs and usage trends to senior leadership and Finance; Contribute hands-on work as needed - writing Terraform, PowerShell, or Python for policy enforcement, automation, and infrastructure management; review infrastructure-as-code pull requests from the team; develop CI/CD pipelines for cloud policy and governance tooling deployment

Requirements

7+ years in cloud engineering, operations, or governance with a strong focus on Azure and AWS; 3+ years of direct people management experience leading technical teams; Expert-level Microsoft Entra knowledge across Entra ID, Conditional Access, Identity Protection, Privileged Identity Management (PIM), Identity Governance, and multi-tenant / cross-tenant architectures; Strong IAM fundamentals: SAML, OIDC, RBAC, and JIT privilege elevation; Proficiency with infrastructure-as-code (Terraform preferred) and scripting (PowerShell, Python, Bash); Experience with cloud policy frameworks (Azure Policy, AWS SCPs, Cloud Custodian) and tagging/naming governance; Experience with cloud cost optimization and financial reporting, plus vendor management for CSPs and SaaS (contracts, billing); Familiarity with Agile methodologies and experience with Azure DevOps; excellent written and verbal communication with the ability to translate complex technical concepts for non-technical stakeholders; Not requiring any type of US work authorization now or in the future (no F1-OPT, F1-CPT, H-1B, TN, L-1, J1, etc.)

Nice to have

Experience in regulated or compliance-heavy environments (e.g., FedRAMP, SOC 2, NIST 800-53); Experience with Microsoft Government Cloud (GCC High, Azure Government); Experience with AWS Organizations, consolidated billing, and multi-account governance; Familiarity with Zero Trust security frameworks and Azure Virtual Desktop or Windows 365 deployments; Familiarity with Jira Service Management (JSM) for ticketing and request workflows; Relevant certifications such as Microsoft Certified: Identity and Access Administrator, Azure Solutions Architect Expert, or AWS Certified Solutions Architect; Experience with KQL, Azure Resource Graph, or similar query and reporting tools

Benefits

competitive salaries; meaningful bonus program; excellent benefits, including healthcare insurance; pension/retirement matching; comprehensive life insurance; employee assistance program; time off plans; paid company holidays; meaningful work; culture of innovation; career progression