Cloud / Platform (DevOps) Engineer (AZURE LANDING ZONE PROVISIONING NETWORK & SECURITY)
Cuboid IT Solutions · San Jose, CA · 1 wk ago
EngineeringFull-time
Role Summary
Stands up and secures the platform provisions the environments, wires CI/CD, and implements the network and identity architecture.
Key Responsibilities
- Environment provisioning. Stand up Dev and Prod via infrastructure-as-code; configure compute, storage, roles, and permissions.
- CICD. Implement DevOps practices and GitHub pipelines for version-controlled promotion and automated deployment.
- Network architecture. Implement secure connectivity (VPN, ExpressRoute, VNets) and the Azure data landing zone with segmentation and controls.
- Security controls. Implement encryption, ingress/egress controls, service accounts, RBAC, and MFA aligned to enterprise identity standards.
Minimum Qualifications (MQ)
- 5+ years in cloud platform / DevOps / infrastructure engineering, primarily Azure.
- Hands-on infrastructure-as-code (Terraform, Bicep, or ARM) and GitHub CI/CD.
- Strong networking and security: VNets, VPN/ExpressRoute, landing zones, RBAC, MFA, encryption.
- Experience provisioning and securing modern data platform environments.
Desired Qualifications (DQ)
- Azure certifications (Administrator, DevOps, or Security Engineer).
- Enterprise identity management integration experience.
- Public-sector security/compliance exposure.