Senior Cloud Engineer

What You'll Do

• Cloud Engineering & Architecture
  • Design, implement, and operate highly scalable, secure Azure infrastructure across IaaS, PaaS, AKS, networking, and identity.
  • Build end-to-end cloud environments from the ground up using automation-first principles.
  • Architect resilient solutions including HA/DR, multi-region, availability zones, and failover designs.
• Automation & Operational Efficiency
  • Develop, maintain, and optimize Terraform modules, pipelines, and reusable frameworks for all Azure deployments.
  • Ensure all infrastructure is code-driven, version-controlled, and standardized across environments.
  • Enforce a strict "no manual deployment" policy.
  • Build deep automation across infrastructure provisioning, configuration management, deployment pipelines, and environment scaling.
  • Develop advanced automation using PowerShell, Python, Bash, and Azure CLI.
  • Optimize CI/CD pipelines to support fully automated build → deploy → security → compliance workflows.
• Networking & Security (Advanced)
  • Design and implement enterprise-grade Azure network architectures: Hub-Spoke, VNet peering, Private Endpoints, VPN, and ExpressRoute.
  • Integrate and manage firewalls — rule design, segmentation, threat prevention, and traffic inspection.
  • Enforce zero-trust and least-privilege access models.
  • Implement and maintain NSGs, Azure Firewall, Application Gateway, and WAF.
  • Ensure compliance with enterprise security policies and frameworks.
• DevOps & Platform Engineering
  • Design and maintain CI/CD pipelines using Azure DevOps and GitHub.
  • Build fully automated infrastructure and application deployment pipelines.
  • Integrate security scanning, secrets management, and artifact pipelines (ACR-based patterns).
  • Enable platform engineering capabilities for developer self-service.
• Containerization & Modern Platforms
  • Design, deploy, and manage AKS-based platforms.
  • Build and support container workflows (Docker, Kubernetes) and secure image pipelines (ACR).
  • Optimize cluster performance, scaling, and networking.
• Performance, Cost & Reliability Optimization
  • Continuously monitor and optimize performance, availability, and cost (FinOps practices).
  • Implement observability stack: Azure Monitor, Log Analytics, alerts, and dashboards.
  • Drive cost governance and efficiency improvements.
• Migration & Integration
  • Lead complex cloud migration initiatives — lift-and-shift, re-platform, and refactor.
  • Integrate cloud environments with on-prem systems and the enterprise network/security stack.
  • Build repeatable migration frameworks and runbooks.
• Security & Governance
  • Implement Azure security best practices across identity (AAD, RBAC, PIM), data protection (encryption, Key Vault), and threat detection (Defender, Sentinel).
  • Drive policy-based governance using Azure Policy and management groups.
  • Maintain strict compliance and audit readiness.
• Documentation & Standards
  • Create and maintain architecture diagrams, IaC standards, runbooks, and SOPs.
  • Define and enforce cloud engineering standards across teams.

What You Bring

• Education: Bachelor's degree in Computer Science, IT, or a related field.
• Experience: 8+ years of IT infrastructure / cloud engineering experience.
• Technical Skills:
  • Cloud & Platforms: Advanced Azure (Compute, Storage, Networking, Identity, Security); strong AKS/container experience.
  • Infrastructure as Code: Expert-level Terraform (mandatory); ARM / Bicep (optional).
  • Automation: Strong scripting in PowerShell, Python, Bash; large-scale automation patterns.
  • DevOps: CI/CD (Azure DevOps, GitHub), Git-based workflows, release automation.
  • Networking: Hub-Spoke, VPN, ExpressRoute, DNS/Routing/NAT; Palo Alto firewall integration (must-have).
  • Security: Cloud security architecture, IAM, compliance & governance frameworks.
• Preferred Certifications: Azure Solutions Architect Expert (AZ-305), Azure Network Engineer (AZ-700), Azure Security Engineer (AZ-500), Azure DevOps Engineer (AZ-400), HashiCorp Terraform Associate (highly preferred).