Manager, Cloud Platform Engineering

About the role

Crescent Energy is seeking an experienced Manager, Cloud Platform Engineering to lead the people, strategy, and engineering behind our Microsoft Azure platform. This is a hands-on leadership role responsible for the cloud foundation that enterprise applications, data, and operational technology services depend on, and for turning that foundation into a self-service platform that engineering teams across the company can build on with speed and confidence.

Responsibilities

• Lead the Cloud Platform Engineering function responsible for Crescent’s Azure platform, including infrastructure, Infrastructure as Code, identity, governance, reliability, and cost.
• Manage, mentor, and develop cloud and platform engineers, including senior engineers, while maintaining a strong hands-on technical presence.
• Set the platform strategy and roadmap, and treat the internal developer platform as a product, with internal developers as customers, clear adoption goals, feedback loops, documentation, and defined measures of success.
• Build and operate self-service capabilities, golden paths, reusable Terraform modules, templates, and guardrails that let application, data, and infrastructure teams provision and run Azure resources safely and consistently.
• Own the design, deployment, operation, and lifecycle management of enterprise-scale Azure infrastructure and shared cloud services.
• Direct Microsoft Entra ID engineering, including identity lifecycle, role-based access control, privileged access, conditional access, enterprise applications, and hybrid identity.
• Establish and enforce Azure governance through management groups, subscription design, landing zones, Azure Policy, tagging standards, and operational guardrails.
• Embed security into the platform by default, including least-privilege access, secrets management, policy-as-code, key and certificate management, logging, and control enforcement, in partnership with the CISO organization.
• Standardize and operate CI/CD pipelines and automation used to build, validate, and deploy platform infrastructure, and provide reusable delivery patterns for engineering teams.
• Mature observability across the platform using Azure Monitor and related tooling, with consistent metrics, logging, dashboards, and alerting standards.
• Lead the FinOps practice for cloud spend, including cost allocation and tagging, budgeting, forecasting, anomaly detection, rightsizing, commitment and rate optimization, showback, and unit economics, in partnership with finance and engineering teams.
• Define platform standards, configuration baselines, change control practices, documentation requirements, and operational runbooks.
• Troubleshoot complex cloud, identity, access, automation, networking, and reliability issues through to resolution, and lead root cause analysis and preventive action.
• Partner with Network Engineering on cloud and hybrid networking, including virtual networks, private connectivity, DNS, and network security controls in Azure.
• Participate in architecture reviews, project planning, vendor and tooling evaluations, infrastructure roadmaps, and M&A integration activities, including standardization of inherited cloud environments and reduction of technical debt.
• Maintain accurate platform documentation, including architecture diagrams, identity and access models, governance and tagging standards, runbooks, and audit evidence.

Qualifications

• Required: Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience. 10+ years of progressive experience in cloud engineering, platform engineering, or infrastructure engineering, including deep hands-on Microsoft Azure experience in enterprise environments.
• Proven track record of leading and developing engineering teams (typically 4+ years), including hiring, mentoring, performance management, and growing senior engineers.
• Strong hands-on and architectural experience designing, operating, and securing enterprise-scale Azure infrastructure and shared platform services.
• Strong hands-on and architectural experience with Terraform for Infrastructure as Code, including module design, state management, versioning, and deployment workflows.
• Strong experience with Microsoft Entra ID engineering and administration, including RBAC, conditional access, privileged access, enterprise applications, identity governance, and hybrid identity.
• Demonstrated experience building self-service or platform-as-a-product capabilities, such as golden paths, reusable modules, templates, internal developer platforms, or paved-road patterns that reduce friction for engineering teams.
• Solid command of Azure governance, including management groups, subscription design, landing zones, Azure Policy, tagging, and operational guardrails.
• Strong cloud security experience, including least-privilege access, secrets management, policy-as-code, logging and monitoring, and control enforcement, with the ability to partner effectively with a security or CISO organization.
• Experience establishing and operating reliability practices, including service level objectives, error budgets, monitoring, alerting, incident response, and postmortems.
• Experience implementing FinOps or cloud cost management practices, including tagging and allocation, budgeting and forecasting, rightsizing, commitment optimization, and reporting.
• Experience with CI/CD pipelines and automation used to deploy or validate Terraform-based infrastructure.
• Strong knowledge of cloud networking concepts, including virtual networks, peering, routing, private endpoints, VPN or private connectivity, DNS, and network security controls.
• Proficiency with at least one of PowerShell, Bash, or Python for cloud automation and operational scripting.
• Strong written and verbal communication skills, with the ability to explain complex technical concepts to technical and non-technical stakeholders, and to drive adoption through clear value and well-designed defaults rather than mandates.
• Ability to operate with urgency, ownership, and sound judgment in an environment where platform availability supports enterprise and field operations.