{"schemaVersion":"jobsearcher.job.v1","id":"2b006f53ff4e8a3ba85c6267","url":"https://jobsearcher.com/jobs/2b006f53ff4e8a3ba85c6267","canonicalUrl":"https://jobsearcher.com/jobs/2b006f53ff4e8a3ba85c6267","title":"Cloud & Infrastructure Engineer","description":"The Cloud & Infrastructure Engineer is a hands-on technical role responsible for the day-to-day operation of Safran USA's hybrid infrastructure across defined primary domains, while supporting peers in adjacent areas. The role sits within a small, highly capable team and operates within a CMMC Level 2 / ITAR-regulated shared services environment supporting multiple Safran aerospace subsidiaries. The right candidate owns their domains with discipline, supports CMMC compliance activities operationally, and grows into cloud operations as Safran USA expands its AWS GovCloud footprint.Key ResponsibilitiesInfrastructure Architecture & EngineeringDesign, implement, and maintain Safran USA's hybrid infrastructure environment.Support on-premises datacenter systems, AWS GovCloud, and Microsoft 365 GCC High.Develop and maintain: Architecture documentationConfiguration baselinesOperational runbooksInfrastructure standardsTechnical diagramsEnsure infrastructure systems are secure, reliable, scalable, and high-performing.Support shared services infrastructure for multiple Safran aerospace subsidiaries.Assist with infrastructure lifecycle management, upgrades, patching, and capacity planning.Identify opportunities to improve availability, security, and operational efficiency.Microsoft 365 GCC High AdministrationAdminister Safran USA's Microsoft 365 GCC High tenant across: Exchange OnlineMicrosoft TeamsSharePointOneDriveMicrosoft Entra IDMicrosoft IntuneManage identity governance and user access controls.Administer Conditional Access policies and MFA enforcement.Support endpoint management and device compliance through Intune.Configure and maintain Microsoft Purview compliance capabilities, including: Audit loggingData Loss Prevention policiesRetention labelsSensitivity labelsAdminister Microsoft Defender for Office 365 threat policies and alert routing.Support Microsoft 365 GCC High licensing, governance, and compliance activities.Ensure Microsoft 365 services align with CMMC, ITAR, and internal security requirements.AWS / AWS GovCloud AdministrationSupport the operation and continued build-out of Safran USA's AWS Landing Zone.Administer AWS and AWS GovCloud services within a regulated environment.Manage core AWS services, including: EC2VPCIAM roles and policiesS3CloudWatchSecurity GroupsImplement cloud security best practices.Support access control, monitoring, and governance processes in AWS.Assist with cloud resource management and operational support.Contribute to workload migration planning as Safran USA transitions selected on-premises systems to AWS during the 2026-2027 timeframe.Support migration readiness assessments, testing, documentation, and post-migration operations.Virtualization & Server AdministrationAdminister Safran USA's VMware vSphere and ESXi datacenter environment.Support virtual machine provisioning and lifecycle management.Manage snapshot governance, host health monitoring, and resource allocation.Support VMware patching, performance monitoring, and troubleshooting.Manage Windows Server environment.Work alongside the Systems Engineer to maintain operational continuity.Support disaster recovery exercises and infrastructure testing.Maintain accurate server and virtualization documentation.Security Systems AdministrationServe as the primary administrator for key security platforms from day one.Administer Safran USA's Privileged Access Management platform, including: Vault structurePrivileged session managementSession recordingCredential vaultingAccess reviewsBreak-glass proceduresAdminister Cisco DUO Federal MFA, including: User enrollmentDevice managementPolicy enforcementActive Directory integrationTroubleshooting and supportMonitoring & Systems ManagementSupport infrastructure health monitoring using SolarWinds NPM and SAM.Review alerts and triage operational issues.Escalate infrastructure events as appropriate.Support SolarWinds SEM log review and alerting activities.Maintain visibility into server, application, cloud, and infrastructure performance.Help improve alert quality and reduce unnecessary noise.Document recurring issues and assist with root cause analysis.Maintain strong operational awareness across assigned infrastructure domains.Compliance & GovernanceOperate assigned systems in alignment with CMMC Level 2 and NIST SP 800-171 requirements.Maintain configuration baselines and technical documentation.Support access reviews and control validation activities.Provide technical evidence for internal and external assessments.Maintain accurate runbooks, procedures, and system records.Support audit readiness across assigned infrastructure areas.Ensure infrastructure administration practices support security, traceability, and accountability.Provide technical input to the team as needed.Backup & Disaster Recovery AdministrationAdminister and maintain enterprise backup and recovery solutions.Support backup and recovery across: Cloud systemsVirtual serversPhysical serversMicrosoft 365 GCC HighQualifications 4-6 years of hands-on enterprise infrastructure engineering experience across two or more of the primary domains listed above. Privileged access management platform -CyberArk, BeyondTrust, or equivalent. Must be able to describe vault structure, session recording, and access review processes personally configured. Enterprise MFA platform - hands-on administration of Cisco DUO, Okta, Azure MFA, or equivalent. Must be able to describe policy configuration and AD integration personally managed.Microsoft 365 administration - Exchange, SharePoint, Teams, Purview, Defender. GCC High experience preferred.AWS hands-on experience - EC2, IAM roles and policies, VPC, S3, CloudWatch. Must describe specific configurations personally built or managed.VMware vSphere / ESXi operational managementWindows Server and Active Directory administration - GPO, DNS, identity management.Enterprise backup and disaster recovery operations - backup job management, restore execution, and DR testing.Strong troubleshooting skills and discipline to follow controlled change management processes. CertificationsCertifications are preferred, not required.","company":"Safran","rawCompany":"safran","city":"Arlington","state":"TX","isRemote":false,"isActive":false,"createdAt":"2026-06-19T09:24:17.919Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1244.00","title":"Network and Computer Systems Administrators","slug":"network-and-computer-systems-administrators"},{"code":"15-1211.00","title":"Computer Systems Analysts","slug":"computer-systems-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"518210","title":"Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services","slug":"computing-infrastructure-providers-data-processing-web-hosting-and-related-services"},{"code":"541513","title":"Computer Facilities Management Services","slug":"computer-facilities-management-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Cloud & Infrastructure Engineer","description":"The Cloud & Infrastructure Engineer is a hands-on technical role responsible for the day-to-day operation of Safran USA's hybrid infrastructure across defined primary domains, while supporting peers in adjacent areas. The role sits within a small, highly capable team and operates within a CMMC Level 2 / ITAR-regulated shared services environment supporting multiple Safran aerospace subsidiaries. The right candidate owns their domains with discipline, supports CMMC compliance activities operationally, and grows into cloud operations as Safran USA expands its AWS GovCloud footprint.Key ResponsibilitiesInfrastructure Architecture & EngineeringDesign, implement, and maintain Safran USA's hybrid infrastructure environment.Support on-premises datacenter systems, AWS GovCloud, and Microsoft 365 GCC High.Develop and maintain: Architecture documentationConfiguration baselinesOperational runbooksInfrastructure standardsTechnical diagramsEnsure infrastructure systems are secure, reliable, scalable, and high-performing.Support shared services infrastructure for multiple Safran aerospace subsidiaries.Assist with infrastructure lifecycle management, upgrades, patching, and capacity planning.Identify opportunities to improve availability, security, and operational efficiency.Microsoft 365 GCC High AdministrationAdminister Safran USA's Microsoft 365 GCC High tenant across: Exchange OnlineMicrosoft TeamsSharePointOneDriveMicrosoft Entra IDMicrosoft IntuneManage identity governance and user access controls.Administer Conditional Access policies and MFA enforcement.Support endpoint management and device compliance through Intune.Configure and maintain Microsoft Purview compliance capabilities, including: Audit loggingData Loss Prevention policiesRetention labelsSensitivity labelsAdminister Microsoft Defender for Office 365 threat policies and alert routing.Support Microsoft 365 GCC High licensing, governance, and compliance activities.Ensure Microsoft 365 services align with CMMC, ITAR, and internal security requirements.AWS / AWS GovCloud AdministrationSupport the operation and continued build-out of Safran USA's AWS Landing Zone.Administer AWS and AWS GovCloud services within a regulated environment.Manage core AWS services, including: EC2VPCIAM roles and policiesS3CloudWatchSecurity GroupsImplement cloud security best practices.Support access control, monitoring, and governance processes in AWS.Assist with cloud resource management and operational support.Contribute to workload migration planning as Safran USA transitions selected on-premises systems to AWS during the 2026-2027 timeframe.Support migration readiness assessments, testing, documentation, and post-migration operations.Virtualization & Server AdministrationAdminister Safran USA's VMware vSphere and ESXi datacenter environment.Support virtual machine provisioning and lifecycle management.Manage snapshot governance, host health monitoring, and resource allocation.Support VMware patching, performance monitoring, and troubleshooting.Manage Windows Server environment.Work alongside the Systems Engineer to maintain operational continuity.Support disaster recovery exercises and infrastructure testing.Maintain accurate server and virtualization documentation.Security Systems AdministrationServe as the primary administrator for key security platforms from day one.Administer Safran USA's Privileged Access Management platform, including: Vault structurePrivileged session managementSession recordingCredential vaultingAccess reviewsBreak-glass proceduresAdminister Cisco DUO Federal MFA, including: User enrollmentDevice managementPolicy enforcementActive Directory integrationTroubleshooting and supportMonitoring & Systems ManagementSupport infrastructure health monitoring using SolarWinds NPM and SAM.Review alerts and triage operational issues.Escalate infrastructure events as appropriate.Support SolarWinds SEM log review and alerting activities.Maintain visibility into server, application, cloud, and infrastructure performance.Help improve alert quality and reduce unnecessary noise.Document recurring issues and assist with root cause analysis.Maintain strong operational awareness across assigned infrastructure domains.Compliance & GovernanceOperate assigned systems in alignment with CMMC Level 2 and NIST SP 800-171 requirements.Maintain configuration baselines and technical documentation.Support access reviews and control validation activities.Provide technical evidence for internal and external assessments.Maintain accurate runbooks, procedures, and system records.Support audit readiness across assigned infrastructure areas.Ensure infrastructure administration practices support security, traceability, and accountability.Provide technical input to the team as needed.Backup & Disaster Recovery AdministrationAdminister and maintain enterprise backup and recovery solutions.Support backup and recovery across: Cloud systemsVirtual serversPhysical serversMicrosoft 365 GCC HighQualifications 4-6 years of hands-on enterprise infrastructure engineering experience across two or more of the primary domains listed above. Privileged access management platform -CyberArk, BeyondTrust, or equivalent. Must be able to describe vault structure, session recording, and access review processes personally configured. Enterprise MFA platform - hands-on administration of Cisco DUO, Okta, Azure MFA, or equivalent. Must be able to describe policy configuration and AD integration personally managed.Microsoft 365 administration - Exchange, SharePoint, Teams, Purview, Defender. GCC High experience preferred.AWS hands-on experience - EC2, IAM roles and policies, VPC, S3, CloudWatch. Must describe specific configurations personally built or managed.VMware vSphere / ESXi operational managementWindows Server and Active Directory administration - GPO, DNS, identity management.Enterprise backup and disaster recovery operations - backup job management, restore execution, and DR testing.Strong troubleshooting skills and discipline to follow controlled change management processes. CertificationsCertifications are preferred, not required.","datePosted":"2026-06-19T09:24:17.919Z","dateModified":"2026-06-19T09:24:17.919Z","hiringOrganization":{"@type":"Organization","name":"Safran","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Arlington","addressRegion":"TX","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"2b006f53ff4e8a3ba85c6267"},"url":"https://jobsearcher.com/jobs/2b006f53ff4e8a3ba85c6267"}}