Cloud Engineer
Role details
Job location
Tech stack
Job description
The Cloud Engineer role is a hands-on Azure expert responsible for day-to-day resource deployment and operational support across multiple subscriptions. They will engineer Terraform modules, automate with PowerShell, and apply architectural best practices for DR/HA, private networking, and monitoring.
Role Objectives
-
Architect scalable Azure landing zones including governance, policy, networking, identity, monitoring, and security layers.
-
Provision and manage Azure resources (App Service, VNets/Private Endpoints, Storage, Key Vault, PostgreSQL) following governance and tagging standards.
-
Build and maintain Terraform modules with policy, RBAC, and diagnostics baked in; manage state/promotion and CI integration.
-
Automate operational tasks with PowerShell via runbooks/functions and pipelines; reduce manual change and improve auditability.
-
Design and validate DR/HA capabilities (Availability Zones, zone-redundant services, backup/restore, runbook failover testing) aligned to RTO/RPO.
-
Harden and troubleshoot private networking (hub-spoke, Private DNS, NSGs, Azure Firewall) and connectivity (VPN/ExpressRoute).
-
Establish monitoring baselines with Azure Monitor/Log Analytics, build actionable dashboards/alerts, and integrate with ITSM for incidents/changes.
-
Support data platform workloads (ADF/Databricks/PostgreSQL) for onboarding, monitoring, and pipeline troubleshooting.
-
Drive FinOps practices (budgets, reservations, rightsizing) while maintaining SLAs and performance targets.
-
Participate in Agile/SAFe ceremonies (standups, planning, retrospectives) and collaborate closely with developers, security, and networking teams.
-
Contribute to documentation and knowledge bases, pair with peers and mentor where appropriate.
-
Uphold secure-by-default practices (least privilege, managed identities, secrets-in-Key Vault) and tagging/governance standards.
Requirements
-
5+ years of hands-on experience with Microsoft Azure across IaaS and PaaS services.
-
Proficiency with Git-based workflows and Infrastructure as Code (Terraform; Bicep/ARM familiarity).
-
Scripting experience (PowerShell required; Python nice to have) focused on automation and repeatability.
-
Working knowledge of Azure networking (VNets, Private Endpoints/Private Link, DNS, NSGs) and identity (RBAC, managed identities).
-
Experience with observability in Azure (Azure Monitor, Log Analytics, Application Insights) and alert hygiene.
-
Strong interpersonal and communication skills with the ability to explain complex topics simply and build trust across teams.
-
Advanced competence in Terraform (modules, workspaces/state, promotion) and PowerShell/Azure CLI automation.
-
Applied architectural knowledge of Azure DR/HA patterns and private networking design.
-
Proven experience operating Azure platforms at scale with ITSM alignment and strong monitoring discipline.
Preferred
-
Microsoft certifications such as AZ-104 (Administrator) and AZ-305 (Solutions Architect).
-
HashiCorp Terraform Associate certification.
-
Experience in regulated or enterprise environments and with ITSM tools (e.g., ServiceNow).
-
Experience working and collaborating in Atlassian Jira