Cloud Engineer

Job summary

The Cloud Engineer deploys, secures, maintains, troubleshoots, and improves Microsoft Azure infrastructure and hybrid services, independently managing assigned services and projects under architectural direction. The role covers Azure networking and identity, Infrastructure as Code with Terraform, Bicep, or ARM templates, PowerShell automation, monitoring, governance, security remediation, cost optimization, and workload recovery. The position is on-site five days per week and includes an after-hours on-call rotation.

Qualifications

• Three to five years of experience in cloud engineering, systems engineering, infrastructure operations, DevOps, or a related technical role.
• At least two years of hands-on Microsoft Azure production experience.
• Experience administering Azure virtual machines, networking, storage, monitoring, identity, and access controls.
• Experience creating and maintaining PowerShell scripts for infrastructure administration and automation.
• Experience with Terraform, Bicep, ARM templates, or another Infrastructure as Code platform.
• Working knowledge of Microsoft Entra ID, Azure RBAC, managed identities, service principals, and least-privilege access.
• Understanding of TCP/IP, DNS, routing, subnetting, firewalls, VPNs, load balancing, and network security.
• Experience administering Windows Server or Linux.
• Experience troubleshooting cloud infrastructure, connectivity, authentication, performance, and availability issues.
• Experience with monitoring, logging, alerting, backup, recovery, patching, and vulnerability remediation.
• Ability to manage assigned work independently and communicate risks, blockers, and technical recommendations.
• Strong written and verbal communication and technical documentation skills.
• Ability to participate in scheduled maintenance and an after-hours on-call rotation.
• Ability to work on-site at the Westlake office five days per week.

Responsibilities

• Design, deploy, maintain, and troubleshoot Azure infrastructure according to architecture and security standards.
• Manage Azure compute, storage, networking, identity, and access services.
• Implement Infrastructure as Code using Terraform, Bicep, or ARM templates.
• Develop PowerShell automation for provisioning, reporting, compliance, operations, and remediation.
• Support Azure DevOps or GitHub deployment workflows, including source control, reviews, testing, and release approvals.
• Configure Azure Monitor, Log Analytics, Application Insights, dashboards, alerts, and diagnostic settings.
• Investigate infrastructure alerts, service degradation, authentication failures, connectivity issues, and performance problems.
• Support hybrid connectivity, firewalls, VPN gateways, ExpressRoute, private DNS, routing, and secure application connectivity.
• Administer backup, recovery, patching, vulnerability remediation, disaster recovery, and business continuity processes.
• Review Azure Advisor, Defender for Cloud, cost-management, and security recommendations and coordinate remediation.
• Apply Azure Policy, tagging, naming, resource-lock, and least-privilege governance controls.
• Identify opportunities to improve resource cost, reliability, and performance.
• Participate in cloud migrations, modernization projects, proof-of-concept deployments, and production implementations.
• Maintain architecture diagrams, operational runbooks, inventories, support procedures, and recovery documentation.
• Prepare and execute infrastructure changes through established approval processes.
• Provide technical guidance and escalation support to technology teams.
• Partner with Cybersecurity to remediate cloud security findings.
• Participate in an after-hours support and on-call rotation.

Skills

Certifications

Degrees

Work schedule

Relocation