> Markdown version of [/jobs/ext/2152660-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/2152660-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Engineer - **Company:** Brown Brothers Harriman & Co. - **Location:** Boston, MA, United States - **Experience:** Expert - **Salary:** $160,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Artificial Intelligence, Amazon Web Services, Automation of Tests, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Engineering, Computer Networks, Continuous Integration, DevOps, Domain Name System (DNS), Github, Identity and Access Management, Subnetting, Key Management, PCI Data Security Standards, Role-Based Access Control, Data Logging, Cloud Monitoring, Data Layers, Kubernetes, Deployment Automation, Azure AKS, Firewall Services Module, Terraform, Key Vault, Vulnerability Analysis - **Published:** August 20, 2026 - **Apply:** https://bbh.wd5.myworkdayjobs.com/BBH/job/Boston/Cloud-Engineer_72360 ## About the Role Experience * 5+ years DevOps, SRE, or cloud infrastructure engineering in SaaS environments * Production infrastructure ownership - not just contributing to an infra team, but owning outcomes Technical Skills * Deep Azure expertise (primary cloud) - AKS, Azure DevOps, Azure Networking, Key Vault, Azure Monitor * Terraform - required; all infrastructure is managed as code * Kubernetes - cluster management, networking, RBAC, security hardening * CI/CD pipeline design - GitHub Actions or Azure DevOps * Container security - image scanning, runtime security, secrets management * Networking - VNet design, private endpoints, DNS, firewall rules Practices * Active user of AI tools for infrastructure and automation tasks Nice to Have * SOC 2 or PCI-DSS compliance experience * Azure security certifications (AZ-500, AZ-104) or equivalent (CISSP, CKS) * Financial services or compliance-sensitive infrastructure background * Experience with data encryption at scale - Azure Key Vault, envelope encryption, field-level encryption * AWS familiarity - we're Azure-primary but AWS awareness is useful * Terraform modules and reusable infrastructure patterns at scale ## Description Our Cloud Engineer will own the infrastructure the entire platform runs on. This is a broad ownership role: cloud infrastructure on Azure, CI/CD pipelines, Kubernetes cluster management, security controls, and cost optimization - all under one remit. This is not a compliance-first security role. It is a cloud infrastructure role where security is a core engineering discipline built into everything, not layered on at the end. You'll work closely with platform engineering to ensure the environment is reliable, observable, and built to scale - and you'll give the rest of the engineering team the confidence to ship quickly because the foundation they're building on is solid. You'll be one of the first cloud infrastructure hire, which means greenfield decisions and real ownership from day one. Responsibilities Infrastructure * Design, deploy, and manage cloud infrastructure on Azure using Terraform and GitOps practices * Own the networking layer - VNets, Subnets, private endpoints, and DNS configuration * Manage Azure resource organization, identity, and access management * Monitor and optimize cloud spending while maintaining performance and reliability CI/CD & Developer Experience * Build and maintain CI/CD pipelines with automated testing, security scanning, and deployment automation * Primary tooling: Azure DevOps and/or GitHub Actions * Work with engineering teams to ensure deployment workflows support fast, safe iteration * Manage environment configuration and secrets (Azure Key Vault) * Kubernetes & Containers * Manage AKS (Azure Kubernetes Service) cluster configuration, scaling, and lifecycle * Implement container security hardening, network policies, and RBAC * Establish patterns for workload deployment, resource management, and observability Security & Compliance * Implement security controls across network, application, and data layers * Conduct vulnerability scanning and manage remediation * Threat modelling for platform components * Support SOC 2 compliance requirements as the company matures Observability & Incident Response * Set up and maintain platform monitoring, alerting, and logging infrastructure * Develop and own incident response procedures * Ensure SLAs are measurable and maintained ## Related Videos - [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)