As Cloud System Engineer, you will design and lead our OS Image Factory: an automated platform that builds hardened Linux and Windows images used by our customers across multi-tenant, multi-account environments worldwide. Azure is the primary platform, AWS is in production and GCP is coming next.
Design and evolve the Image Factory architecture, primarily on Azure, with AWS in production and GCP on the roadmap.
Build automated image pipelines with Packer, Ansible and GitHub Actions, on top of managed services (Azure VM Image Builder, AWS EC2 Image Builder).
Harden Windows Server and Linux images as code against CIS Benchmarks, DISA STIG and Microsoft security baselines.
Publish and distribute images across subscriptions, accounts and tenants in multiple regions (Azure Compute Gallery, AMI sharing with AWS Organizations).
Define image standards, versioning, promotion across environments (dev, test, prod) and retirement policies.
Manage the image lifecycle: monthly patching, critical CVE rebuilds, automated testing and vulnerability scanning.
Enforce the use of approved images through Azure Policy and AWS guardrails.
Prepare GCP onboarding with a single, cloud-agnostic Packer and Ansible codebase.
Enable customers to consume images in self-service, with clear documentation and release notes.
Collaborate with Cloud, Security and Platform Engineering teams, and drive adoption with customer teams.
Lead and mentor the SysOps / DevOps engineers operating the factory.
Use AI solutions to accelerate and optimise the Image Factory.
Leverage AI capabilities to enhance and streamline automated patching and image update processes.
Master's studies in computer science or similar.
Eight or more years of experience in cloud infrastructure, systems engineering or DevOps, including three or more years designing OS image pipelines in production.
Experience with large multi-subscription / multi-account, multi-region environments.
Technical Skills :
Cloud platform : Expert in Microsoft Azure (VM Image Builder, Compute Gallery, Azure Policy, Entra ID); AWS (EC2 Image Builder, AMIs, Organizations); GCP good to have
Image build & IaC : Packer, Ansible, Terraform
OS : Linux (RHEL, Ubuntu, SUSE) & Windows Server expertise, security hardening (CIS, STIG) and image patch management
Security : Microsoft Defender for Cloud
CI/CD : GitHub Actions
Programming : Python, Bash, PowerShell
Versioning : Git
Steering : Jira, Confluence, Scrum methodology
Professional Attributes :
Able to design a target architecture while staying hands-on.
Product mindset: thinks in terms of customers, releases and service levels.
Speaks English fluently.
Skilled in qualifying customer needs and explaining security trade-offs, with strong communication and leadership abilities.
Experienced in mentoring engineers and working with distributed, international teams.
Open to change, proactive, and a driving force within a team.