Lead Engineer I, Tech Engineering

Responsibilities

• Develop and maintain automation scripts to efficiently manage and secure Azure environments, ensuring consistent configuration, resource provisioning, and compliance with organizational standards
• Design, implement, and administer secure Azure infrastructure supporting large-scale, mission-critical enterprise systems, integrating architecture solutions, and applying security best practices throughout the lifecycle
• Lead and oversee cloud technology projects, collaborating with senior business and technical stakeholders to ensure successful, secure deployment, compliance with industry regulations, and alignment with organizational goals
• Manage and automate cloud patching, security updates, and vulnerability remediation for all Azure resources, proactively monitoring for threats and recommending enhancements to architecture, infrastructure, automation, and security technologies
• Create and maintain comprehensive documentation for cloud processes, automation tools, and security controls, ensuring clarity and accessibility for both technical and non-technical audiences
• Mentor and guide junior team members on cloud technologies, security, compliance, and best practices, fostering knowledge sharing and continuous improvement within the team
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications

• Minimum five years of recent industry experience, including at least four years in Cloud Engineering and Operations with a strong security focus, demonstrating expertise in infrastructure, architecture design, and cloud operations
• Bachelor's degree from an accredited college or university in engineering, computer science, information systems, or a related field is preferred; minimum of a high school diploma or GED is required
• Proven ability to apply technical knowledge to real-world cloud engineering challenges
• At least two years of hands-on experience with Azure PowerShell, Automation, ARM, and Bicep, including security automation and scripting for resource management and compliance
• Extensive experience with Azure PaaS services such as Azure SQL, Key Vault, Log Analytics, Storage/Backup, and Application Service Environments, emphasizing secure configuration, management, and integration
• Strong understanding of Azure networking, security controls, identity management, and network components including firewalls, routers, proxies, and communication protocols, with robust troubleshooting and incident response skills
• Proven experience in patch management, vulnerability assessment, remediation, and cloud security operations, supported by excellent verbal and written communication abilities