Principal Cloud DevOps Engineer

Job description

At OneStream, we're on a mission to empower every Finance organization and professional to exceed their potential. Our global teams span continents, cultures, and time zones, united by a shared purpose as we build the operating system for modern Finance and help organizations move with greater speed, clarity, and confidence.
That mission comes to life through our people. Behind every innovation, customer success, and milestone are talented people working together to make a difference. That's why we're looking for people who are bold enough to think big, authentic in how they lead and collaborate, curious about what's possible, and committed to delivering results.
Want a closer look before you apply? Explore our Careers site to learn more about our people, culture, and benefits.
Summary
OneStream Software is a hyper-growth SaaS company focused on financial and operational data analytics for the world’s largest companies. We host our software on Microsoft Azure across regions worldwide. This Principal-level role provides technical leadership in designing and automating scalable, secure cloud environments. The employee will shape cloud strategy, influence technical direction, resolve complex challenges, and mentor engineers across the organization. This role partners across teams to drive reliable, efficient cloud operations at scale.
Primary Duties and Responsibilities
Own technical strategy and multi-quarter roadmaps across Cloud Engineering’s core domains (CI/CD, IaC, containers/AKS, observability, security).
Represent Cloud Engineering in cross-functional and leadership forums, partnering with Product, Security, Compliance, Platform, and QE.
Lead complex, multi-quarter initiatives spanning departments and engineering teams, driving alignment, adoption, and delivery.
Serve as the escalation point for the most complex production issues and drive resolution of systemic technical debt.
Mentor engineers and scale technical leadership and standards without relying on direct authority.
Designing optimal solutions that take into consideration the ideal technical implementation while balancing the financial impacts to the organization.
Own the Terraform codebase end to end: module design and versioning, remote state strategy on Azure Storage backends, state-splitting by lifecycle/ownership, and drift detection.
Embed security-as-code: managed identities and workload identity federation by default, Key Vault integration, RBAC and Azure Policy defined as Terraform resources, and container image scanning via ACR / Defender for Containers.
Design for reliability: multi-region failover (Traffic Manager / Front Door), backup and disaster recovery (Azure Backup, paired regions), observability (Azure Monitor, Log Analytics, Application Insights), as well as partner with development and business on SLO/error-budget definition.
Design reusable, versioned Terraform modules and AKS blueprints that other engineering teams can self-serve our “paved road.”
Required Education and Experience
BS/BA in Computer Science, Engineering, or related field.
10+ years of hands-on experience in cloud infrastructure, DevOps, or platform engineering, including IaC (Terraform/Bicep), CI/CD & GitOps, and cloud architecture (Azure preferred).
Demonstrated experience owning technical strategy and driving org-wide standards, not just team-level delivery.
Proven transformative impact on improving developer experience.
Deep understanding of the Azure Well Architected Framework.
Preferred Education and Experience
Experience at a cloud service provider, managed service provider, or SaaS company.
Experience shaping cloud-native strategy at scale, such as the Kubernetes/AKS platform, Azure SQL, AI Foundary, Azure APIM.
Relevant certifications (e.g., AZ-305, AZ-400, CISSP) are a plus.
Experience developing and solutioning for common compliance frameworks, such as FedRAMP, DoD IL4, SOC, SOX.
Knowledge, Skills, and Abilities
Comfortable with high ambiguity; thinks strategically and abstractly.
Strong presence and judgment; able to influence all levels of leadership.
Supervisory Responsibilities
This position has no supervisory responsibilities
Travel
Travel Requirement: Travel is not expected to exceed 10%.
Benefits at OneStream
OneStream employees are passionate, hardworking individuals who go above and beyond to keep our customers happy and follow through on our mission statement. They consistently deliver the best and in turn, we make every effort to keep them cared for and happy. A sample of the benefits we provide are:
Excellent Medical Plan
Dental & Vision Insurance
Life Insurance
Short & Long Term Disability
Vacation Time
Paid Holidays
Professional Development
Retirement Plan
#LI-Remote #LI-AS1
Total compensation is based on experience, skills, and location using objective, job-related criteria. Additional variable compensation and benefits may apply.
Gross annual base salary
$151,000 - $196,000 USD
All candidates must be legally authorized to work for any company in the country where this position is located without sponsorship.
OneStream Software is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable local laws, regulations, and ordinances.
If you need assistance and/or a reasonable accommodation during the application process, reach out to RecruitingAccommodations@onestreamsoftware.com.
OneStream may use the personal information you provide to process your application and contact you, in accordance with applicable privacy laws such as the CCPA and GDPR. For more information about how we handle your personal information, please review OneStream's Privacy Policy.
Emails about job opportunities at OneStream are only sent by employees with an @onestreamsoftware.com email address. Reach out to your contact at OneStream if you suspect a phishing scam.
Apply for this job
*
indicates a required field