Principal Platform Engineer

SPA is looking for a Principal Platform Engineer to build our Azure cloud platform. We are seeking a technical expert who can excel at being hands-on keyboard while also architecting and delivering a secure, scalable cloud platform supporting space-defense missions. You’ll drive the implementation of Microsoft’s Azure Landing Zone (ALZ/MLZ) architectures and core Azure services (AKS, AAD, Azure Policy, VNets, Key Vault, Monitor), applying modern DevSecOps and GitOps practices throughout. In close collaboration with other platform engineers, product managers, application teams, cybersecurity, and corporate stakeholders, you’ll transform mission needs into resilient, production-grade cloud infrastructure. Architect and implement an Azure-native foundation using Infrastructure-as-Code (Terraform, Bicep) and GitOps workflows. Design and deploy Microsoft Azure Landing Zone (ALZ) and Mission Landing Zone (MLZ) reference architectures to establish a secure, governed, and scalable cloud environment. Engineer and operate AKS clusters with integrated service mesh, automated scaling, workload identity, and disaster recovery patterns. Develop secure CI/CD pipelines in Azure DevOps or GitHub Actions that integrate SAST/DAST, IaC scanning, image signing, and automated promotion to IL4–IL5 environments. Implement observability with Azure Monitor, Log Analytics, Prometheus, Grafana, and OpenTelemetry to track platform health, performance, and cost. Enforce Zero-Trust and compliance (NIST 800-53/171, CMMC) using Azure Policy, Defender for Cloud, and automated security controls. Document and evolve platform architecture, technical baselines, and implementation roadmaps supporting corporate and user priorities. Collaborate cross-functionally with fellow platform engineers, application developers, cybersecurity specialists, product managers, and business stakeholders to enhance platform capabilities and reliability.