Cloud Infrastructure Engineer

Job summary

The Cloud Infrastructure Engineer operates and modernizes an enterprise Azure environment in a regulated financial-services setting, advancing infrastructure-as-code delivery and reliability under the Microsoft Cloud Adoption Framework. The role builds Bicep modules and CI/CD pipelines, manages Azure networking and hybrid connectivity, strengthens Zero Trust security and NIST/FFIEC compliance, and monitors services with Azure Monitor and KQL. It also supports disaster recovery, production escalations, and on-call operations.

Qualifications

• At least 5 years of enterprise cloud infrastructure and engineering experience, primarily with Azure.
• Strong Azure networking skills, including NSGs, routing, DNS, Private Link, and hybrid connectivity troubleshooting.
• Hands-on experience with Bicep, ARM templates, Azure Policy, Git workflows, and CI/CD infrastructure deployment.
• Experience troubleshooting with Azure Monitor, Log Analytics and KQL, and Network Watcher.
• Knowledge of Entra ID, hybrid identity, RBAC, managed identities, Key Vault, and Zero Trust security.
• Operational experience with Azure VMs, App Services, Azure SQL, and Storage on Windows and Linux.
• Proficiency in PowerShell and Azure CLI.
• Working knowledge of formal change management and ServiceNow; familiarity with Agile or Scrum.
• Regulated-industry experience producing compliance evidence aligned with NIST or FFIEC.
• Strong analytical, troubleshooting, communication, and documentation skills.
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.

Responsibilities

• Operate, secure, and improve enterprise Azure workloads and infrastructure.
• Implement Azure Policy and landing-zone governance standards.
• Manage hub-and-spoke networking, private endpoints, DNS, routing, and hybrid connectivity.
• Build and maintain Bicep infrastructure as code and CI/CD deployments.
• Automate recurring infrastructure and support tasks using PowerShell, Azure CLI, and pipelines.
• Improve monitoring, logging, dashboards, and alerts using Azure Monitor and Log Analytics.
• Apply Zero Trust controls and support vulnerability remediation and regulatory audits.
• Plan and test multi-region resiliency, disaster recovery, and failover; document root cause analyses.
• Support Microsoft Fabric infrastructure, gateways, workspaces, and capacity.
• Provide tier-two and tier-three support, participate in on-call, and prepare documented ServiceNow changes.
• Maintain runbooks, standards, and architecture documentation; mentor engineers.

Skills

Certifications

Degrees

Languages

Work schedule

Industry

Contract length

Relocation