> Markdown version of [/jobs/ext/2709114-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/2709114-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Engineer - **Company:** The Office - **Location:** Vancouver, United States - **Experience:** Experienced - **Salary:** $100,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Application Performance Management, Microsoft Azure, Bash Shell, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cloud Storage, Computer Networks, Databases, Continuous Integration, Domain Name System (DNS), Identity and Access Management, IP Routing, Subnetting, Virtual Private Networks (VPN), Python (Programming Language), Key Management, Network Security, Log Analysis, SQL Azure, Networking Basics, Platform as a Service (PAAS), Role-Based Access Control, Azure Active Directory, Cloud Services, Azure DevOps Pipelines, Zero Trust Network Access, Software Engineering, Virtual Machines, Software Vulnerability Management, Azure Service Bus, Policy as Code, Scripting, Load Balancing, Cloud Platform System, Cloud Monitoring, HybridCloud, Firewalls (Computer Science), Infrastructure as Code (IaC), Azure Security Center, Gitlab-ci, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Bicep, Hashicorp, Microsoft Sentinel, Azure AKS, Cloud Migration, Azure Service Fabric, Software Coding, Elastic Beanstalk, Terraform, Serverless Computing, Azure Resource Manager, Key Vault - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/cloud-engineer-office-ally-9747666 ## About the Role * Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience or relevant industry certifications. * 3+ years of experience in a cloud engineering role with demonstrated proficiency in implementing, designing, and managing Microsoft Azure solutions * Deep understanding of Azure cloud services including Azure Virtual Machines, Azure Networking, Azure Storage, Azure Databases, Azure Security, and Azure DevOps * Proficiency in Azure infrastructure as code tools including Terraform (required) and Bicep or ARM templates * Demonstrated knowledge of cloud security best practices, identity and access management (IAM), encryption, network security, and compliance standards (HIPAA, SOC 2) * Experience operating AKS or self-managed Kubernetes in production environments * Solid Azure networking fundamentals including VNets, NSGs, Private Endpoints, DNS, and load balancing * Familiarity with Azure Entra ID, RBAC, Managed Identities, and service principals * Experience building CI/CD pipelines with Azure DevOps (or equivalent, e.g., GitLab CI) * Scripting proficiency in Bash and/or Python for automation and tooling * Strong communication and collaboration skills with the ability to interact effectively with cross-functional teams, stakeholders, and vendors Nice to Have * Healthcare, SaaS, or regulated industry experience * Azure certifications such as AZ-104, AZ-305, AZ-500, AZ-700, or CKA/CKAD * Experience with GitOps tooling such as Flux or ArgoCD * Familiarity with policy-as-code tools including Checkov, OPA/Gatekeeper, and Azure Policy * Exposure to secrets management platforms such as HashiCorp Vault, Azure Key Vault, and External Secrets Operator * Experience with FinOps practices and Azure cost optimization tooling * Familiarity with Windows Server, Active Directory, and hybrid identity scenarios ## Description The Cloud Engineer is responsible for designing, implementing, and managing cloud solutions based on Microsoft Azure. This is a hands-on role serving as a key technical contributor to our cloud platform spanning Platform as a Service (PaaS) services, Azure Kubernetes Service (AKS), networking, and ensuring the scalability, reliability, and security of our Azure cloud infrastructure. This role works closely with cross-functional teams including application development, security, and operations to build resilient cloud environments that meet organizational needs and compliance obligations including SOC 2 and HIPAA. What You'll Do Infrastructure as Code & Automation * Design and deploy Azure cloud solutions including virtual machines, virtual networks, storage accounts, databases, and PaaS services to meet business and technical objectives * Configure and optimize Azure resources for performance, scalability, and cost-efficiency using automation tools, scripting languages, and infrastructure as code (IaC) techniques including Terraform and Bicep * Manage Azure DevOps pipelines and CI/CD workflows to automate software delivery, infrastructure provisioning, and deployment activities Azure PaaS & Platform Services * Design and operate PaaS workloads using Azure App Service, Azure Functions, Azure SQL, Azure Service Bus, Azure Storage, and Event Hub * Evaluate and onboard new PaaS offerings aligned with workload requirements, cost targets, and compliance obligations * Manage Azure Key Vault, App Configuration, and Managed Identities for secrets and configuration lifecycle * Implement and manage Azure governance policies, security controls, and compliance standards to ensure confidentiality, integrity, and availability of cloud resources Kubernetes & Container Platform * Administer AKS clusters including node pool scaling, upgrades, and RBAC configuration * Implement and maintain ingress controllers, network policies, workload identity, and pod security standards * Integrate AKS with Azure Container Registry, Key Vault CSI Driver, External Secrets Operator, and monitoring tooling * Collaborate with development teams on Helm chart packaging, GitOps patterns, and service mesh considerations Networking * Design and manage Azure virtual networks, subnets, NSGs, route tables, VNet peering, and Private Endpoints * Configure and maintain Azure Firewall, Application Gateway, Azure Front Door, and VPN Gateway * Implement and troubleshoot DNS architecture including Azure Private DNS Zones and hybrid DNS resolution * Support hub-and-spoke or Virtual WAN topologies across production, staging, and development environments Security & Compliance * Apply zero-trust networking principles, least-privilege IAM, and conditional access policies across the Azure tenant * Configure and tune Microsoft Defender for Cloud, Microsoft Sentinel integration, and Azure Security Center recommendations * Support SOC 2 and HIPAA compliance obligations through evidence collection, control implementation, and audit readiness * Participate in vulnerability management, patch lifecycle governance, and security incident response Monitoring, Documentation & Operations * Build and maintain monitoring, alerting, and dashboards using Azure Monitor, Log Analytics, and Application Insights * Monitor and troubleshoot Azure cloud environments, proactively identifying and resolving performance issues, availability disruptions, and security vulnerabilities * Participate in cloud migration projects, workload migrations, and hybrid cloud integrations, ensuring seamless transitions and minimal disruption to business operations * Document Azure cloud configurations, procedures, and troubleshooting steps, maintaining accurate records and knowledge base articles to facilitate knowledge sharing ## Related Videos - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [My journey into DevOps world - How it all started!](https://www.wearedevelopers.com/videos/545-my-journey-into-devops-world-how-it-all-started) - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) - [Automated MS SQL Server database deployments with dacpacs and Azure DevOps](https://www.wearedevelopers.com/videos/334-automated-ms-sql-server-database-deployments-with-dacpacs-and-azure-devops) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)