About this role
IT Sys Arch Sr Prin
Job Description: About BAE Systems At BAE Systems, you don’t have to choose between cutting-edge technology and a balanced life. We empower our people to drive innovation by supporting the businesses and platforms that define the future of national security. We pair this high-impact mission with a culture of trust, camaraderie, and true flexibility, ensuring you have the support you need to perform at your best. Join a collaborative team where your growth is prioritized and your work enables global progress. Job Description We are seeking a highly motivated Cloud Engineer to join our Windows Server Operations team. This critical role bridges the gap between traditional Windows Server operations and modern cloud‑native delivery. You will be responsible for ensuring the stability, security, and performance of our Windows infrastructure while leading efforts in cloud migration, CI/CD automation, and secure lifecycle management.
The ideal candidate has a strong background in Windows Server administration and a proven track record of migrating and modernizing legacy workloads into Azure. They leverage Infrastructure‑as‑Code (IaC) and automated pipelines to drive operational efficiency across a hybrid cloud environment. Key Responsibilities • Cloud Modernization & Migration: Lead the migration of data and services from legacy Windows systems to modern cloud or virtualized platforms, ensuring data integrity and seamless transitions. • Automation & CI/CD: Design, build, and maintain Azure DevOps CI/CD pipelines (YAML and classic) to automate server provisioning, configuration, and lifecycle management across development, test, and production environments. • Infrastructure as Code (IaC): Manage and optimize Azure infrastructure deployments using ARM/Bicep templates, Terraform, or similar IaC tools to replace manual administrative processes. • Advanced Scripting: Write, debug, and maintain advanced PowerShell scripts to automate repetitive system administration tasks and integrate heterogeneous tools. • Security & Compliance: Ensure adherence to security standards, including CMMC controls, DoD STIGs, CIS Benchmarks, and IAVM requirements. • Infrastructure Support: Design and maintain Windows Servers and containerized workloads (AKS, Docker, Tanzu) in a Cloud environment. • Automated Endpoint Management: Manage real-time endpoint visibility, vulnerability management, and automated orchestration of monthly patching cycles using Tanium to maintain high compliance and operational continuity. • Collaboration & Leadership: Partner with cross-functional cybersecurity and development teams to resolve complex technical issues and provide technical guidance to junior engineers. • Industry Awareness: Stay current on emerging technologies and trends, proactively expanding knowledge and skills through self‑study and formal training.
Required Skills and Education: Required Education, Experience & Skills • Experience: 12+ years of experience in Windows Server Operations and Cloud Automation with HS Diploma, OR 10+ years with AA, OR 8+ years with BS. Or equivalent experience. • Cloud Expertise: Proven experience designing and maintaining Azure/cloud DevOps pipelines, with hands‑on familiarity across Azure services such as App Services, Key Vault, Storage, Networking, and Azure Monitor. • Automation Proficiency: Demonstrated expertise with scripting languages (PowerShell, REST, etc.), CI/CD principles, DevSecOps practices, and Infrastructure‑as‑Code technologies including ARM, Bicep, and Terraform. • Windows Administration: In-depth knowledge of Windows Server (2016, 2019, 2022, 2025), Security Policies, and Group Policy Objects (GPOs). • Problem Solving: Strong ability to analyze complex issues, perform root‑cause analysis on pipeline or system failures, and manage high‑priority incidents. • Independence: Demonstrated ability to work autonomously, balance multiple priorities, and meet demanding deadlines.
Preferred Skills and Education: Preferred Education, Experience & Skills • Azure or AWS Certifications including Azure Solution Architect Expert, Azure Administrator Associate, DevOps Engineer, AWS Solution Architect Professional, AWS CloudOps Engineer, AWS Developer or other related certifications. • Experience with CMMC, NIST 800-171, NIST 800-53 or similar compliance frameworks. • Experience maintaining endpoint consistency in a Hybrid Cloud environment. • Experience with VCF (Aria) Automation and Operations or similar cloud management platforms. • Strong understanding of TCP/IP, DHCP, DNS, firewalls, and VLAN segmentation. • Working knowledge of Dell PowerEdge servers and Dell OpenManage Enterprise. • Endpoint Management: Practical experience using Tanium for endpoint visibility, patching, and security compliance. #LI-DM2 #LI-remote
About BAE Systems, Inc.: BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support.
Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters.
This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.
Benefits Information: Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
Intern Benefits: Temporary employees generally are not eligible for BAE Systems benefits, but can elect to participate in the 401(k) savings plan. Temporary employees working 20+ hours per week are eligible for medical benefits, the employee assistance program, and business travel accident insurance.
Please note: Some benefits may be different for union employees that are governed by a collective bargaining agreement (CBA) or for positions covered by a wage law called the McNamara-O’Hara Service Contract Act (SCA).