Job description

Important Notice for Applicants: At Bixal, we want to ensure a transparent and secure application process for all candidates. Official communication will come from an email address ending in @bixal.com or from @bixal.na.teamtailor-mail.com. Messages from other sources may be fraudulent, and you should exercise care to avoid any links or attachments included. Bixal will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Need Assistance or a Reasonable Accommodation? If you need assistance or a reasonable accommodation to complete your application, we're here to help. Please reach out to us at talent@bixal.com and let us know how we can support you. You do not need to share personal details or disclose the nature of your request. You can expect a response from a team member within 24 hours during the regular work week and on the next operating day during the weekend or holidays. Why Bixal? Bixal is a consulting company headquartered in Fairfax, VA, working alongside governments and organizations to help them deliver better services and experiences to the communities they serve. Using evidence-based knowledge and technology, Bixal empowers clients to deliver on their missions more effectively by fostering a culture of learning and continuous improvement. Our values: • People-First : Emphasizing the importance of people in all aspects of work. • Collaboration and Transparency : Valuing teamwork and open communication. • Growth Mindset : Encouraging innovation and continuous improvement. • Creating Lasting Impact : Focusing on meaningful outcomes and positive change. About the role: Bixal is seeking a Sr. Cloud Engineer to design, deploy, and manage secure, scalable cloud infrastructure supporting data, analytics, and AI/ML workloads. You’ll work hands-on with AWS, Databricks, Terraform, and GitHub Actions while partnering with engineering and security teams to automate, optimize, and strengthen our data platform. This role offers you a unique opportunity to make a meaningful impact on a project that aligns with Bixal’s mission of delivering innovative, human-centered solutions. While the role has a fixed duration, we are committed to transparency and collaboration, keeping you informed about contract updates and new opportunities. At Bixal, we support your professional journey, ensuring your experience reflects our inclusive, purpose-driven culture and prepares you for future success. Location This role can work remotely from anywhere in the USA. You must be legally authorized to work in the US.  Bixal does not provide visa sponsorship.  Compensation: The salary range for this role is $120,000 – $135,000. In the spirit of transparency, most offers tend to land near the midpoint of the range. We make compensation decisions thoughtfully, considering your experience, the skills you bring, and our commitment to internal equity. Fairness and transparency are core to how we operate. Responsibilities: • Own the design, deployment, and operations of cloud infrastructure supporting enterprise data platforms, analytics workloads, and AI/ML capabilities across development, validation, and production environments. • Build and maintain Infrastructure as Code (IaC) using Terraform to provision, manage, and standardize AWS and Databricks resources. • Develop and maintain reusable Terraform modules and automation patterns for Databricks workspaces, Unity Catalog resources, networking components, IAM roles, S3 storage, KMS encryption, service principals, and platform integrations. • Administer and support Databricks environments, including workspace configuration, account-level settings, Unity Catalog governance, metastore configuration, external locations, storage credentials, service credentials, clusters, jobs, secrets, and access controls. • Manage Databricks platform migrations, upgrades, and architectural changes while ensuring minimal disruption to users and downstream integrations. • Design and implement secure AWS architectures including VPC networking, private connectivity, VPC endpoints, IAM policies, cross-account access, S3 architectures, encryption, and least-privilege access patterns. • Build and maintain CI/CD pipelines using GitHub Actions to automate infrastructure deployments, validation, security checks, operational workflows, and platform management tasks. • Develop automation tooling using Python, Bash, and cloud APIs to improve operational efficiency and reduce manual platform administration. • Support enterprise identity and access management patterns including user provisioning, groups, service principals, OAuth/PAT authentication, workload identities, and automated permission management. • Implement and maintain observability and audit logging solutions for cloud and Databricks environments, including integration with enterprise monitoring platforms such as Splunk. • Design and support secure data platform integrations including Delta Lake, Unity Catalog, Delta Sharing, external locations, data access controls, and consumer-facing data products. • Support AI/ML platform capabilities by enabling services such as MLflow, Databricks AI tooling, AWS Bedrock, foundation model integrations, and GenAI workloads. • Partner with data engineering, analytics, security, and application teams to troubleshoot complex platform issues and establish scalable engineering standards. • Lead technical investigations, proof-of-concepts, and platform improvements focused on reliability, security, automation, and developer experience. • Create and maintain technical documentation, onboarding guides, architecture diagrams, operational runbooks, and self-service tooling for internal teams and external consumers. • Participate in incident response, root cause analysis, and continuous improvement efforts for production data platform services. • Other relevant duties as assigned and qualified/trained to perform Qualifications: • Bachelor's degree in a relevant technical field plus 4+ years of experience, or equivalent professional experience. • Strong hands-on experience managing AWS cloud infrastructure in enterprise environments. • Experience with Terraform or similar Infrastructure as Code tooling, including developing reusable modules and managing large infrastructure deployments. • Experience administering Databricks environments, including Unity Catalog, workspace management, account-level resources, permissions, service principals, and integrations. • Strong understanding of AWS services including IAM, S3, VPC, Route 53, KMS, Lambda, VPC endpoints, and networking fundamentals. • Experience designing secure cloud architectures using least privilege IAM, encryption, private networking, and compliance-focused controls. • Experience building and maintaining CI/CD pipelines using GitHub Actions or similar automation platforms. • Strong Python and Bash scripting skills with experience automating cloud, infrastructure, or platform operations. • Experience supporting production data platforms, distributed systems, analytics environments, or AI/ML infrastructure. • Understanding of data platform concepts including Delta Lake, medallion architecture (Bronze/Silver/Gold), data governance, and access control models. • Experience troubleshooting complex issues across cloud infrastructure, networking, identity, automation, and data platforms. • Strong communication skills with the ability to collaborate with engineers, architects, security teams, and non-technical stakeholders. • Ability to obtain and maintain a Public Trust security clearance. Nice to Have Skills and Experience: • Experience working in FedRAMP, FISMA, or other regulated cloud environments. • Experience with Databricks E2 architecture, workspace provisioning, and account-level platform administration. • Experience leading Databricks migrations, networking redesigns, or cloud modernization initiatives. • Experience supporting AI/ML platforms, AWS Bedrock, LLM integrations, RAG architectures, or GenAI workloads. • Experience with enterprise logging and monitoring solutions such as Splunk. • Experience managing GitHub organization settings, repository automation, and developer tooling. • Databricks, AWS, Terraform, or cloud security certifications. • Experience supporting healthcare, or federal government environments. How We Support Our Team: • Flex hours • 401K with matching incentive • Parental Leave • Medical/dental/vision benefits • Flex Spending Account • Company provided short-term disability and life insurance • Commuter benefits • Paid Time Off (PTO) • 11 Paid holidays Our company is committed to providing equal employment opportunities for all individuals and complies with all applicable federal, state, and local anti-discrimination laws. Employment decisions are based on merit, qualifications, and business needs.

Requirements

Must-haves

Need Assistance or a Reasonable Accommodation?
This role can work remotely from anywhere in the USA. You must be legally authorized to work in the US.  Bixal does not provide visa sponsorship.
Own the design, deployment, and operations of cloud infrastructure supporting enterprise data platforms, analytics workloads, and AI/ML capabilities across development, validation, and production environments.
Build and maintain Infrastructure as Code (IaC) using Terraform to provision, manage, and standardize AWS and Databricks resources.
Manage Databricks platform migrations, upgrades, and architectural changes while ensuring minimal disruption to users and downstream integrations.
Design and implement secure AWS architectures including VPC networking, private connectivity, VPC endpoints, IAM policies, cross-account access, S3 architectures, encryption, and least-privilege access patterns.
Build and maintain CI/CD pipelines using GitHub Actions to automate infrastructure deployments, validation, security checks, operational workflows, and platform management tasks.
Develop automation tooling using Python, Bash, and cloud APIs to improve operational efficiency and reduce manual platform administration.
Support enterprise identity and access management patterns including user provisioning, groups, service principals, OAuth/PAT authentication, workload identities, and automated permission management.
Implement and maintain observability and audit logging solutions for cloud and Databricks environments, including integration with enterprise monitoring platforms such as Splunk.
Design and support secure data platform integrations including Delta Lake, Unity Catalog, Delta Sharing, external locations, data access controls, and consumer-facing data products.
Support AI/ML platform capabilities by enabling services such as MLflow, Databricks AI tooling, AWS Bedrock, foundation model integrations, and GenAI workloads.
Partner with data engineering, analytics, security, and application teams to troubleshoot complex platform issues and establish scalable engineering standards.
Lead technical investigations, proof-of-concepts, and platform improvements focused on reliability, security, automation, and developer experience.
Create and maintain technical documentation, onboarding guides, architecture diagrams, operational runbooks, and self-service tooling for internal teams and external consumers.
Participate in incident response, root cause analysis, and continuous improvement efforts for production data platform services.
Other relevant duties as assigned and qualified/trained to perform
Bachelor's degree in a relevant technical field plus 4+ years of experience, or equivalent professional experience.
Strong hands-on experience managing AWS cloud infrastructure in enterprise environments.
Experience with Terraform or similar Infrastructure as Code tooling, including developing reusable modules and managing large infrastructure deployments.
Experience administering Databricks environments, including Unity Catalog, workspace management, account-level resources, permissions, service principals, and integrations.
Strong understanding of AWS services including IAM, S3, VPC, Route 53, KMS, Lambda, VPC endpoints, and networking fundamentals.
Experience designing secure cloud architectures using least privilege IAM, encryption, private networking, and compliance-focused controls.
Experience building and maintaining CI/CD pipelines using GitHub Actions or similar automation platforms.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aimlawsci/cdpythonllm

Platform: teamtailor
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto

Paid Time Off

Parental Leave