> Markdown version of [/jobs/ext/3784877-cloud-platform-engineer](https://www.wearedevelopers.com/jobs/ext/3784877-cloud-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Platform Engineer - **Company:** Varis Technology Inc - **Location:** Coppell, TX, United States - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Audit Trail, Microsoft Azure, Cloud Computing, Cyber Security, Continuous Integration, Data as a Services, DevOps, File Systems, Domain Name System (DNS), File Server, Python (Programming Language), Key Management, Log Analysis, Networking Basics, Windows PowerShell, Role-Based Access Control, Akamai, Microsoft SharePoint, Data Logging, Scripting, Cloud Platform System, Delivery Pipeline, Large Language Models, Claude Code, Agentic-AI, Microsoft InTune, Containerization, Bicep, Hardware Infrastructure, Cloud Migration, Terraform, Serverless Computing, Container Apps - **Published:** October 16, 2026 - **Apply:** https://www.juju.com/job/16_bcdac218 ## About the Role * 5+ years in cloud infrastructure, platform, or DevOps engineering, with deep hands-on Azure. * AI-native and forward-thinking - AI and agentic tools (for example, Claude Code) are a natural part of how you build, and you actively look for responsible new ways to apply AI as the technology advances. * Hands-on building and operating application hosting on Azure - serverless (Functions) and containers (Container Apps or AKS) - with networking, deployment, and production observability. * Establishing CI/CD and, ideally, infrastructure-as-code (Bicep and/or Terraform) - the ability to bring these practices to an environment still maturing in them. * Strong command of Entra ID (identity, RBAC, PIM, conditional access), Azure Key Vault, and Azure Monitor / Log Analytics. * Automation scripting in Python and/or PowerShell, with the discipline to write maintainable, tested code rather than one-off scripts. * Security instincts (least privilege, secrets hygiene, change control, audit trails) and comfort operating with high autonomy on a lean team. Preferred Skills * Microsoft 365 tenant administration - Exchange Online, Teams, SharePoint / OneDrive, groups, and licensing. * Depth in the Microsoft 365 E5 security stack: Sentinel, Defender, Intune, and Purview. * Experience designing and shipping AI or agentic systems in production, with a clear point of view on doing it safely. * Networking fundamentals (Ubiquiti / UniFi), DNS (Akamai), and certificate lifecycle (DigiCert / ACME). * Decommissioning legacy on-premises infrastructure (Active Directory, file servers) and running cloud migrations. * Azure and/or security certifications; experience operating under insurer- or audit-driven change control., **Visa Sponsorship: At this time, we are unable to provide visa sponsorship, including H-1B sponsorship, for this position. Candidates must be authorized to work in the United States without current or future sponsorship ## Description Vari is building the next generation of its IT function around a small, senior team and a growing portfolio of internally built applications and AI agents - software we expect to keep expanding. We're hiring a Cloud Platform Engineer to own and grow the cloud infrastructure that portfolio runs on: the compute, networking, data, deployment, and security foundations in Azure that let internal apps and agents ship quickly, run reliably, and scale as we build more of them. This is a build-first role with real operational ownership - you'll design and ship the platform, and you'll also be one of the people we trust to approve and safeguard changes to production. You'll partner with the Director of Technology Operations & Support, the Endpoint & Security Operations lead, and the data engineers and software developers building on the platform. Above all, we want someone who is genuinely AI-native and forward-thinking - quick to reach for AI as a force multiplier, curious about where the technology is heading, and eager to expand what it can do for Vari., * Own the cloud platform for internal apps and agents - design, build, and operate the Azure foundations our growing portfolio of internally built applications and AI agents runs on: compute (Azure Functions, Container Apps, and container platforms as they're needed), networking, data services, and the paths that get software to production. * Make shipping and scaling routine - establish deployment pipelines, environment and release patterns, and observability so new apps and agents can be built, deployed, and monitored quickly and consistently as the portfolio keeps growing. * Design for reliability and scale - plan capacity, performance, and resilience for a fleet of services we expect to expand, so the platform stays healthy as more is built on top of it. * Provide sensible guardrails - per-app and per-agent identities with least-privilege access, secrets in Azure Key Vault, structured logging, and lightweight approval and safety controls for automation that changes state. * Bring infrastructure-as-code where it's the right path - help us evaluate and, where it earns its keep, adopt IaC (Bicep or Terraform) and source-controlled configuration to make the estate reproducible and reviewable. This is a space we're ready to invest in and mature, not one we consider finished. * Work AI-natively - use agentic development tooling (for example, Claude Code) as a primary way of building, actively seek out new places AI can remove toil or unlock capability, and design LLM-in-the-loop workflows where agents propose, deterministic code executes, and humans approve. What You'll Own * Approve and safeguard change - serve as a primary approver for standard production changes and a second approver for security-, identity-, and network-impacting ones, alongside the Director and the Endpoint & Security Operations lead. * Own reliability - join an on-call and escalation rotation with the Director and our external MSP backstop; own root-cause analysis on issues the platform surfaces. * Operate the platform - the health of hosted apps and agents, monitoring (Site24x7), patch and update evidence, backup-and-restore verification, and certificate lifecycle - increasingly automated, always evidenced. * Partner on security - work with the Endpoint & Security Operations lead on Sentinel operations and cloud security posture, complementing rather than duplicating endpoint and L1 ownership. What You'll Drive Over Time Simplification is part of the mandate: consolidating identity onto Entra ID, modernizing file storage to cloud-native services, and retiring the remaining on-premises servers. We remove work before we automate it - the best outcome is often an entire category of maintenance that no longer exists.