← All roles

Senior Manager, Cloud Engineering Governance - FedRAMP

Delinea· Engineering
Apply on company site
Remote$160k - $200k + equity + bonusFull-timePosted 6mo ago

About the role

We are seeking an experienced Manager of Cloud Governance to lead a team of cloud engineers responsible for governing, securing, and optimizing a multi-cloud, multi-tenant environment. This role combines people management with hands-on technical leadership across Microsoft Entra tenants, AWS Organization, cloud policy enforcement, cost optimization, and vendor relationships.

Responsibilities

  • Directly manage a small team of cloud engineers; handle hiring, coaching, performance reviews, career development, and administrative tasks (time-off, expense approvals)
  • Facilitate team stand-ups, planning, and backlog refinement; break down Director-defined initiatives into well-scoped, actionable work items with the team
  • Produce weekly status reports for leadership covering progress, blockers, and upcoming priorities
  • Serve as primary point of contact for cloud governance requests, escalations, and issues from Engineering and other departments; collect requirements and feedback when implementing new systems, guardrails, or CSP configurations; communicate policy changes and best practices to development teams
  • Develop, implement, and enforce cloud governance frameworks and policies across Azure, AWS, and SaaS platforms to meet regulatory and industry requirements
  • Define and manage RBAC, tagging, and naming standards across cloud service providers
  • Create and enforce policies using IaC and policy-as-code tooling (e.g., Azure Policy, AWS SCPs, Cloud Custodian, Terraform); design break-glass access and JIT privilege elevation workflows
  • Oversee multiple Microsoft Entra tenants used by Engineering and other departments, including cross-tenant synchronization, identity lifecycle management (provisioning, deprovisioning, attribute-based scoping), and SAML/OIDC authentication for SaaS applications and CSPs
  • Oversee hardware security key (YubiKey) lifecycle management - procurement, provisioning, and phishing-resistant authentication policies - for the FedRAMP environment
  • Conduct security assessments and audits; perform root cause analysis on governance-related incidents; support compliance initiatives in regulated and compliance-heavy environments, including audit readiness and evidence collection
  • Manage vendor relationships for cloud service providers and SaaS platforms within a shared responsibility model - including billing, contract negotiation, authentication configuration, and delegation to end users
  • Monitor cloud usage and spending; identify and implement cost optimization strategies; evaluate licensing models and SKU options; provide regular reports on cloud costs and usage trends to senior leadership and Finance
  • Contribute hands-on work as needed - writing Terraform, PowerShell, or Python for policy enforcement, automation, and infrastructure management; review infrastructure-as-code pull requests from the team; develop CI/CD pipelines for cloud policy and governance tooling deployment

Qualifications

  • 7+ years in cloud engineering, operations, or governance with a strong focus on Azure and AWS
  • 3+ years of direct people management experience leading technical teams
  • Expert-level Microsoft Entra knowledge across Entra ID, Conditional Access, Identity Protection, Privileged Identity Management (PIM), Identity Governance, and multi-tenant / cross-tenant architectures
  • Strong IAM fundamentals: SAML, OIDC, RBAC, and JIT privilege elevation
  • Proficiency with infrastructure-as-code (Terraform preferred) and scripting (PowerShell, Python, Bash)
  • Experience with cloud policy frameworks (Azure Policy, AWS SCPs, Cloud Custodian) and tagging/naming governance
  • Experience with cloud cost optimization and financial reporting, plus vendor management for CSPs and SaaS (contracts, billing)
  • Familiarity with Agile methodologies and experience with Azure DevOps; excellent written and verbal communication with the ability to translate complex technical concepts for non-technical stakeholders

Skills

Required:Azure and AWS cloud governanceMicrosoft EntraIAM fundamentals (SAML, OIDC, RBAC, JIT)Infrastructure as code (Terraform)Scripting (PowerShell, Python, Bash)Cloud policy frameworks (Azure Policy, AWS SCPs, Cloud Custodian)Cost optimization and financial reportingAgile methodologies and Azure DevOps
Nice to have:Vendor management (CSPs and SaaS)

Benefits

  • competitive salaries
  • meaningful bonus program
  • healthcare insurance
  • pension/retirement matching
  • comprehensive life insurance
  • employee assistance program
  • time off plans
  • paid company holidays
Last updated Jul 15, 2026. Interested? Apply on the company site.

About Delinea

Identity security, simplified.

Delinea Identity Security and Privileged Access Management

identity securityprivileged access managementPAMcloud-native platformAI-driven platform
Company profileWebsite

More open roles at Delinea