Senior Cloud Engineer

Role Description

The Senior Cloud Engineer will lead the Azure infrastructure and delivery pipelines supporting software used across 150+ airports worldwide. This role is responsible for:

• Managing cloud migrations across tenants and subscriptions.
• Modernizing legacy .NET and Windows workloads into current Azure services.
• Building and maintaining the CI/CD pipelines our engineering teams rely on every day.
• Serving as a senior technical resource for how we build, deploy, secure, and operate our platform.
• Working closely with engineers, architects, and leadership to support infrastructure decisions through implementation and production.
• Ensuring our systems remain scalable, secure, and reliable.
• Making a direct impact across our technology environment.

Key Responsibilities

• Cloud Infrastructure & Platform Management:
  • Design, build, and manage Azure infrastructure including App Services, VNets, DNS, Private Endpoints, Key Vault, and Storage supporting production airport operations.
  • Manage and optimize Azure SQL and SQL Server VM environments, including backups, HA/DR planning, performance monitoring, and secure connectivity.
  • Administer Windows Server and IIS environments where legacy workloads remain and support migration to App Services, containers, or other managed solutions.
  • Build monitoring and observability across the platform using Azure Monitor, Log Analytics, and Application Insights to support data-driven operational decisions.
• DevOps Automation & Delivery:
  • Design, maintain, and improve CI/CD pipelines in Azure DevOps and GitHub Actions for .NET/C# applications, including build, testing, artifact management, and multi-environment deployments.
  • Establish and maintain Infrastructure as Code standards using Bicep, Terraform, or ARM templates.
  • Partner with application engineers on release strategy, branching, environment promotion, and production readiness.
• Security, Compliance & Governance:
  • Strengthen security through RBAC, network controls, secrets management, patching, and cost governance across multiple subscriptions and tenants.
  • Set the security bar for how we run in Azure: least-privilege RBAC, segmented networks, Private Endpoints, secrets in Key Vault, and managed identities instead of static credentials.
  • Oversee vulnerability management, including patch schedules, dependency and image scanning, and ensuring identified findings are properly addressed and resolved.
  • Build security into CI/CD pipelines through secret scanning, SAST/DAST, signed artifacts, and policy-based controls.
  • Lead SOC 2 compliance efforts and customer security reviews by maintaining documentation, keeping evidence current, managing technical controls, and reducing administrative burden on the engineering team.
• Technical Leadership & Operational Excellence:
  • Serve as a senior technical resource for infrastructure decisions, while supporting documentation, mentoring, and operational best practices.
  • Identify opportunities to improve system reliability, security, performance, and operational efficiency, and lead those improvements through implementation.

Qualifications

• 6+ years of experience in DevOps, SRE, or Cloud Engineering roles, with at least 3 years focused on Microsoft Azure.
• Proven ownership of production CI/CD pipelines in Azure DevOps or GitHub Actions.
• Strong hands-on experience deploying and supporting .NET / C# applications across development, test, and production environments.
• Strong knowledge of Azure networking including VNets, NSGs, Private Endpoints, DNS (public and private), and VPN/ExpressRoute fundamentals.
• Production experience with SQL Server and Azure SQL, including deployment, performance tuning, backup and recovery, and secure access practices.
• Proficiency with at least one IaC tool (Bicep, Terraform, or ARM) used in production environments.
• Strong scripting skills in PowerShell and Bash, with a focus on automating repetitive operational tasks.
• Strong troubleshooting skills across infrastructure, networking, Windows Server, IIS, application, and database layers.
• Working knowledge of Azure security fundamentals including Entra ID, RBAC, network security, encryption in transit and at rest.
• Experience building CI/CD pipelines that securely manage secrets, control deployment access, protect artifact integrity, and maintain clear environment separation.
• Familiarity with security frameworks such as CIS, NIST, OWASP Top 10, or Microsoft Cloud Security Benchmark.

Benefits

• Generous rewards for hard work and dedication.
• Leadership takes a constructive interest in every team member’s success.
• Our cultural focus on people and results - not bureaucracy and arbitrary rules.
• Work/Life Balance is respected and encouraged.
• Be part of a team that enjoys time together and helps each other succeed.
• You will not be micromanaged: Plan, prioritize, and schedule your own tasks.

How To Apply

To be considered for the position, please follow the instructions below carefully. Applicants that do not meet these requirements may not be considered.

• Apply directly through our official application link provided in this posting.
• Resume File Naming: The file name of your resume should be your last name, first name, and requisition ID #2632 in the following format: LastName_FirstName_ID2632.
• Application Completion: Please complete the application in full to be considered for the position.

Hiring Process

Our goal is to ensure a fair, transparent, and engaging process for every candidate. Here’s what you can expect once your application is submitted:

• Assessment: Qualified candidates will be invited to complete a brief online assessment.
• First Round Interview: Selected candidates will participate in an initial video interview.
• Technical Interview: Candidates advancing to this round will complete a live video technical interview.
• Final Interview: Top candidates will participate in a final video interview before we make our final selection.
• Employment Offers: Any offer of employment will be contingent upon a background check and verification of residency and work authorization.