Senior Manager, Cloud Engineering Governance - FedRAMP

Stack

Responsibilities

• ▹Directly manage a small team of cloud engineers: hiring, coaching, performance reviews, career development and administration
• ▹Facilitate stand-ups, planning and backlog refinement; break Director-defined initiatives into actionable work items
• ▹Produce weekly status reports for leadership
• ▹Serve as primary point of contact for cloud governance requests, escalations and issues; collect requirements and feedback when implementing new systems, guardrails or CSP configurations
• ▹Develop, implement and enforce cloud governance frameworks and policies across Azure, AWS and SaaS platforms
• ▹Define and manage RBAC, tagging and naming standards
• ▹Create and enforce policies using IaC and policy-as-code tooling (e.g. Azure Policy, AWS SCPs, Cloud Custodian, Terraform); design break-glass access and JIT privilege elevation workflows
• ▹Oversee multiple Microsoft Entra tenants, including cross-tenant synchronization, identity lifecycle management and SAML/OIDC authentication
• ▹Oversee hardware security key (YubiKey) lifecycle management for the FedRAMP environment: procurement, provisioning and phishing-resistant authentication policies
• ▹Conduct security assessments and audits, perform root cause analysis on governance incidents and support compliance initiatives
• ▹Manage vendor relationships for cloud service providers and SaaS platforms, including billing, contract negotiation and authentication configuration
• ▹Monitor cloud usage and spending, implement cost optimization strategies and report to leadership and Finance
• ▹Contribute hands-on: write Terraform, PowerShell or Python, review infrastructure-as-code pull requests and develop CI/CD pipelines

Requirements

• ▹7+ years in cloud engineering, operations or governance with a strong focus on Azure and AWS
• ▹3+ years of direct people management experience leading technical teams
• ▹Expert-level Microsoft Entra knowledge (Entra ID, Conditional Access, Identity Protection, PIM, Identity Governance, multi-tenant architectures)
• ▹Strong IAM fundamentals: SAML, OIDC, RBAC, JIT privilege elevation
• ▹Proficiency with infrastructure-as-code (Terraform preferred) and scripting (PowerShell, Python, Bash)
• ▹Experience with cloud policy frameworks (Azure Policy, AWS SCPs, Cloud Custodian) and tagging/naming governance
• ▹Experience with cloud cost optimization and financial reporting, plus vendor management for CSPs and SaaS
• ▹Familiarity with Agile methodologies and Azure DevOps
• ▹Excellent written and verbal communication, able to explain complex technical concepts to non-technical stakeholders
• ▹Candidates who need any type of US work authorization are not considered

Nice to have

• ▹Experience in regulated or compliance-heavy environments (FedRAMP, SOC 2, NIST 800-53)
• ▹Experience with Microsoft Government Cloud (GCC High, Azure Government)
• ▹Experience with AWS Organizations, consolidated billing and multi-account governance
• ▹Familiarity with Zero Trust frameworks and Azure Virtual Desktop or Windows 365 deployments
• ▹Familiarity with Jira Service Management (JSM)
• ▹Relevant certifications: Microsoft Certified: Identity and Access Administrator, Azure Solutions Architect Expert, AWS Certified Solutions Architect
• ▹Experience with KQL, Azure Resource Graph or similar query and reporting tools

Soft skills

What we offer

• ▹Competitive salary and a meaningful bonus program
• ▹Healthcare insurance
• ▹Pension/retirement matching
• ▹Life insurance
• ▹Employee assistance program
• ▹Time off plans and paid company holidays
• ▹Career progression

About the company

Delinea secures human and machine identities. Its cloud-native Identity Security Platform applies context across the identity lifecycle, covering cloud and traditional infrastructure, data, SaaS applications and AI.