Cloud Engineer (Azure)

Overview

Own the cloud platform our customers run on. You'll design Azure landing zones, codify infrastructure, harden security, and build the observability that keeps production healthy. The role spans architecture and hands-on engineering — you'll be in the terminal as much as in design docs.

Key Responsibilities

• Architect and build Azure landing zones aligned with the Cloud Adoption Framework.
• Author Infrastructure-as-Code in Bicep or Terraform, with reusable modules and CI gates.
• Implement identity, networking, and security baselines (Entra ID, Defender, Sentinel).
• Lead cost optimization and FinOps reviews; surface savings without sacrificing reliability.
• Establish observability and on-call practices that catch issues before customers do.

Requirements

• 4+ years of professional cloud or platform engineering experience, primarily on Azure.
• Strong IaC fluency (Bicep or Terraform) and pipeline-driven delivery (GitHub Actions, Azure DevOps).
• Solid grasp of networking, identity, and the Azure security boundary.
• Scripting in PowerShell and a general-purpose language (Python or TypeScript).
• Comfort owning incidents and writing actionable post-mortems.

Additional Skills

• Kubernetes (AKS), service mesh, or container platform experience
• Sentinel / Defender / KQL for security analytics
• FinOps Foundation certification
• Government / regulated environment exposure