Cloud Infrastructure Engineer

The Princeton DMIA Integration team is seeking an experienced Infrastructure Engineer to be the backbone of our Integration Services team. This role owns the provisioning, configuration, security, and ongoing maintenance of all infrastructure that supports our integration platforms - spanning API integrations, data pipelines, and the shared services that underpin them. You will work across our current on-premises Linux environment and be instrumental in building out the cloud infrastructure as we modernize our platform stack. This position is a hybrid role., Architect, Design and Develop

• Provision, configure, and maintain all infrastructure supporting integration, and data and platforms including WSO2, and related middleware on on-premises Linux servers.
• Design and build Azure cloud infrastructure hosting platform using AKS (Azure Kubernetes Service), and other Azure services for the organization’s next-generation API, data, and applications, following infrastructure-as-code (IaC) principles.
• Manage and harden on-premises server environments including OS patching, package management, service configuration, and security hardening on Linux.
• Administer IAM integrations including LDAP directory services, Active Directory, service account management, and certificate lifecycle management.
• Own network configuration relevant to integration workloads: DNS, firewall rules, load balancers, VPNs, and API gateway networking.

Collaborate and Coordinate

• Collaborate on CI/CD pipeline infrastructure, including build agents, artifact repositories, and deployment automation tooling.
• Support API and data engineering teams with environment provisioning, capacity planning, and performance tuning of integration runtimes.

Production Support

• Participate in on-call production support rotation and serve as escalation point for infrastructure-layer incidents.
• Implement and maintain monitoring, alerting, and logging infrastructure (log aggregation, metrics dashboards, uptime monitoring) for all integration services.
• Lead disaster recovery planning, backup procedures, and environment restoration for integration platform components.

• Azure cloud infrastructure - compute, networking, storage, identity, security
• Kubernetes and containerization - Docker, AKS or equivalent managed Kubernetes
• Infrastructure-as-Code - Bicep, Terraform, or ARM; Bicep preferred
• Linux / shell scripting
• Python programming
• SQL - sufficient for operational queries and platform tooling
• Networking - DNS, HTTP/S, TCP/IP, load balancing, proxies, firewalls
• IAM - Active Directory, LDAP, OAuth 2.0, SAML, certificate management
• 7+ years provisioning and managing cloud infrastructure on Azure, including network and security configuration
• Demonstrated experience building or scaling a shared platform that hosts applications for multiple teams - including tenant isolation, resource governance, and self-service or templated onboarding
• Experience establishing CI/CD pipelines for automated deployment of containerized workloads, using Azure DevOps, Jenkins, GitHub Actions, or equivalent
• Experience embedding automated security controls into deployment pipelines - container image and vulnerability scanning, policy enforcement, compliance gating
• Linux/Unix systems administration with RHEL/CentOS/Ubuntu - systemd, package management, performance tuning
• Advanced shell and Python scripting for automation, monitoring, and operational tasks
• Hands-on IAM experience - Active Directory, LDAP, certificate management, and SSO integration
• Solid networking fundamentals - TCP/IP, DNS, HTTP/S, load balancing, firewall and proxy configuration
• Working knowledge of REST APIs for infrastructure automation and tool integration
• Experience with infrastructure monitoring and observability tooling - Prometheus, Grafana, ELK, Azure Monitor, or equivalent
• Ability to set technical direction and mentor engineers, including documenting standards and transferring knowledge to colleagues newer to modern cloud practice
• Ability to work directly with application teams to translate hosting requirements into platform capabilities, and to communicate technical constraints to non-technical stakeholders
• Education: Bachelor’s degree in computer science, information technology, engineering, or a related field; or equivalent professional work experience

PREFERRED

• Experience with GitOps deployment practices - ArgoCD, Flux - and Helm chart authoring
• Experience administering WSO2 platform infrastructure (API Manager, Micro Integrator, streaming components)
• Azure-native security tooling - Azure Policy, Defender for Cloud, private endpoints, network security groups
• Secrets management - HashiCorp Vault, Azure Key Vault
• Configuration management - Ansible, or equivalent
• Familiarity with cloud-native data platform infrastructure - Snowflake, Databricks, Microsoft Fabric, or equivalent
• Higher education environment experience, particularly federated identity - Shibboleth, SAML-based SSO
• Cloud platform certifications - Azure Administrator, Azure Solutions Architect, CKA, or equivalent
• Exposure to FinOps practices and cloud cost optimization
• Experience designing infrastructure documented and standardized for eventual operational handoff

Princeton University is an and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability status, protected veteran status, or any other characteristic protected by law. The University considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s qualifications, work experience, education/training, key skills, market, collective bargaining agreements as applicable, and organizational considerations when extending an offer. The posted salary range represents the University’s good faith and reasonable estimate for a full-time position; salaries for part-time positions are pro-rated accordingly. If the salary range on the posted position shows an hourly rate, this is the baseline; the actual hourly rate may be higher, depending on the position and factors listed above. The University also offers a comprehensive benefit program to eligible employees. Please see this for more information. Standard Weekly Hours 36.25 Eligible for Overtime No Benefits Eligible Yes Probationary Period 180 days Essential Services Personnel (see policy for detail) No Physical Capacity Exam Required No Valid Driver’s License Required No Experience Level Director #LI-JJ1 Salary Range $135,000 to $150,000