• Define and execute the enterprise Azure cloud and platform strategy, aligned with business growth, clinical operations, and product delivery needs • Set the multi-year vision for cloud architecture, internal developer platforms, and DevOps capabilities that enable product teams to move faster with less friction • Own Azure landing zones, subscription strategy, core network topology, and shared platform services across all environments • Establish standards for infrastructure design, availability, resiliency, and scalability across Azure, M365, and supporting platforms • Champion modernization initiatives, including cloud-native adoption, containerization, serverless, and legacy platform refactoring • Own the end-to-end Azure environment, including compute, storage, networking, identity (Entra ID), PaaS services, and platform tooling • Ensure high availability, performance, and operational reliability of mission-critical systems supporting clinical and business workflows • Partner with application, data, product, and analytics teams to design infrastructure that supports high-throughput data pipelines, AI/ML workloads, and advanced analytics use cases • Drive continuous evaluation and adoption of new Azure services where they create measurable business value • Administer and optimize the Microsoft 365 E5 tenant, including Exchange, SharePoint, Teams, OneDrive, Intune, and the full E5 security and compliance stack • Maximize the value of E5 capabilities such as Defender for Endpoint, Defender for Cloud Apps, Purview, and Entra ID Premium P2, in close partnership with the Cybersecurity team • Establish governance, lifecycle, and licensing optimization practices to ensure cost discipline and full utilization of E5 entitlements • Modernize end-user collaboration, identity, and device management experiences while maintaining strong compliance posture • Build and evolve an Internal Developer Platform (IDP) that provides paved paths, golden templates, and self-service capabilities for product teams • Drive adoption of Infrastructure as Code (Terraform), GitOps, and policy-as-code for provisioning, configuration, and lifecycle management • Standardize CI/CD pipelines, automated testing, release engineering, and progressive delivery patterns across the enterprise • Reduce manual operations through automation, self-service tooling, and platform observability — measured by developer velocity, deployment frequency, lead time, and change failure rate • Treat the cloud and developer platforms as internal products with roadmaps, OKRs, adoption metrics, and stakeholder feedback loops • Operate as a peer to Product and Engineering leadership within an agile, product-led operating model • Embed platform engineers alongside product squads to architect scalable, resilient solutions from day one • Influence product architecture decisions, ensuring cloud-native, secure-by-design, and cost-aware patterns are adopted upstream rather than retrofitted • Use product management practices — discovery, prioritization, roadmaps, customer interviews — to shape platform investments • Own enterprise Azure networking architecture, including VNet design, hub-and-spoke topologies, peering, routing, private endpoints, and Azure Firewall strategy • Partner with the Cybersecurity team on inspection, segmentation, and zero-trust networking, while retaining ownership of network design, performance, and reliability boundaries • Support third-party integrations and secure data movement patterns required by the business • Partner deeply with the Security, Privacy, and Compliance teams to ensure cloud and M365 environments meet HIPAA, HITRUST, and internal risk requirements • Own infrastructure-level security posture: network segmentation, identity foundations, encryption standards, secrets management, and secure-by-design architecture • Embed shift-left security and DevSecOps practices into the platform and CI/CD pipelines • Ensure infrastructure supports auditability, logging, and compliance reporting requirements • Participate in enterprise risk assessments and lead remediation planning for infrastructure-related findings • Own cloud financial management (FinOps) practices: cost visibility, chargeback, optimization, forecasting, and capacity planning • Drive a culture of cost-aware engineering across cloud and DevOps teams, with clear unit economics for platform services • Lead the DevOps organization, embedding DevOps and Site Reliability principles across engineering and product teams • Lead vendor relationships with Microsoft and other strategic cloud, hosting, networking, and platform tooling partners • Balance cost efficiency with performance, resilience, and time-to-market • Establish SLAs, SLOs, and error budgets for infrastructure and platform services • Lead 24x7 incident response for infrastructure and platform-related events; drive blameless post-incident reviews and systemic improvements • Define infrastructure lifecycle standards, change management practices, and environment governance that scale with the business • Build mature observability practices spanning metrics, logs, traces, and proactive alerting • Build, coach, and lead high-performing Cloud Engineering, DevOps, and Platform teams — including cloud engineers, system administrators, system engineers, and Azure platform engineers, building deep technical excellence and clear career paths • Set technical direction, architectural standards, and clear career paths for engineers across multiple disciplines • Cultivate a product-minded, learning-oriented, and inclusive culture grounded in engineering excellence • Foster strong cross-functional collaboration with Product, Engineering, Data, Security, and IT Operations leadership.

• You'll strategically develop our most important international key accounts—focusing on long-term growth, infrastructure utilization, and stable customer relationships, not just the next quick deal. • You’ll turn OBRs into a real management tool for customer relationships, lead them through the process, and establish standards for data-driven customer management, expansion potential, risk identification, and account health. • You’ll advise technical contacts on VPS, bare-metal, and infrastructure topics, as well as modern AI/GPU workloads. • Together with Product, Operations, and Support, you will further develop a scalable key account and customer success setup. • You will lead our three-person KAM team both technically and managerially, and further develop standards, role definitions, and prioritization. • You will represent Contabo at select customer events, infrastructure and AI events, and relevant tech communities.

Role Description As a Senior Software Engineer on the Cloud Foundation team, you will join a team that is enabling SiriusXM to take advantage of the power and capabilities of cloud infrastructure in a way that is stable, properly managed, secure, and cost-effective. - Build and Manage Foundational Cloud Infrastructure: The Cloud Foundation team uses Infrastructure as Code to implement standards around core areas of the cloud environment such as networking, identity management, and security. These standards must be constantly evaluated and updated to account for changes in business priorities, company policies, and new/updated services from the cloud providers themselves. - Improve Transparency: Help other teams outside of Cloud Foundation understand how the Cloud platform works, what its limitations are, and what guidelines were used to design it. Learn how other organizations within SiriusXM get work done and help figure out how the Cloud platform can evolve to better support them. - AWS Expertise: Leverage and enhance Amazon Cloud environments to support current and future infrastructure needs, staying informed on new services and practices. - Optimize Infrastructure Costs: Drive initiatives to optimize infrastructure for cost-effectiveness without compromising performance or security. - Collaborate with other technical groups: Work closely with counterparts in the technical organization such as Networking, Security, Development, and others in Platform Engineering to ensure that we stay aligned towards the overall goals of the business and adhere to company policies. Qualifications - Bachelor’s degree in Computer Science, Engineering, or a related field, or an equivalent combination of education and experience. - 5+ years in Cloud Infrastructure, Platform Engineering Development, DevOps, or Site Reliability Engineering roles. - 2+ years of experience with AWS services (EC2, S3, ELB, VPC, IAM) or equivalent cloud environments, with a strong understanding of AWS best practices. - 2+ years of experience running Linux-based systems, with advanced knowledge of Linux operating systems. - Proficiency in Typescript, Python, Bash, or other common languages used for automation and infrastructure management. - Expertise with tools like CloudFormation (CDK) or Terraform to deploy and manage infrastructure at scale. - Proficiency in Git and experience with platforms like GitLab or GitHub for collaborative code management. - Curiosity and Initiative: You’re curious, unafraid to ask “why,” and proactive in exploring solutions and innovative ideas. - High Availability Mindset: You prioritize resilience and reliability in everything you design and deploy. - Must have legal right to work in the U.S. Requirements - Base salary for this position to be in the range of $105,800 to $165,000 depending on skills, qualifications, and experience. - This role might be eligible for discretionary short-term and long-term incentives. Benefits - Work environment that fosters mutual respect, professionalism, and cooperation. - Equal opportunity employer that does not discriminate on the basis of any characteristic protected by applicable federal, state, or local laws.

• Design, deploy, and operate AWS infrastructure across multiple accounts and environments • Build and maintain Infrastructure as Code — Terraform modules, pipelines, drift detection • Own identity and access: SSO integration, Keycloak realms, IdP federation, RBAC • Operate HashiCorp Vault for secrets management — policies, auth methods, dynamic credentials, rotation • Build and maintain the observability stack — Prometheus, Grafana, dashboards, alerting • Implement landing zones, account vending, networking, and guardrails • Partner with security and SRE on compliance, hardening, and incident response • Automate operational work — provisioning, access reviews, certificate and secret rotation • Document architecture, runbooks, and onboarding guides • Participate in on-call rotation for platform services