Cloud Infrastructure Engineer

At Customers Bank, we believe in working hard, working smart, working together to deliver memorable customer experiences and having fun. Our vision, mission, and values guide us along our path to achieve excellence. Passion, attitude, creativity, integrity, alignment, and execution are cornerstones of our behaviors. They define who we are as an organization and as individuals. Everyone is encouraged to have personal development plans. By doing so, our team members are on their way to achieve their highest potential and be successful in their personal and professional lives.Must be legally eligible to work in the United States without sponsorship, now or in the future, to be considered.Who is Customers Bank?Founded in 2009, Customers Bank is a super-community bank with over $22 billion in assets. We believe in dedicated personal service for the businesses, professionals, individuals, and families we work with.We get you further, faster.Focused on you: We provide every customer with a single point of contact. A dedicated team member who’s committed to meeting your needs today and tomorrow.On the leading edge: We’re innovating with the latest tools and technology so we can react to market conditions quicker and help you get ahead.Proven reliability: We always ground our innovation in our deep experience and strong financial foundation, so we’re a partner you can trust.What You’ll Do:We are seeking a Senior Cloud Infrastructure Engineer with strong expertise in Azure platform engineering, Azure networking, operational reliability, and cloud governance.This role is focused on operationalizing secure, scalable, and resilient Azure platform services aligned to enterprise modernization initiatives and Microsoft Cloud Adoption Framework (CAF) operational maturity goals.The ideal candidate will possess deep hands-on experience with Azure infrastructure, Azure-native networking, Bicep-based infrastructure deployment, automation, and cloud operational excellence. This role requires strong engineering judgment, troubleshooting capability, and the ability to collaborate effectively across infrastructure, security, architecture, and application teams.The ideal candidate should be comfortable advocating for best practices, constructively challenging weak implementations, and adapting when presented with stronger technical or operational approaches.Maintain enterprise-scale Azure solutions, ensuring best practices in cloud architecture, security, operational efficiency, and governance are followed.Design, implement, support, and maintain Azure networking solutions across multi-region environments.Engineer and support Azure networking services including Virtual WAN, hub-and-spoke networking, ExpressRoute, NSGs, Azure Firewall, Application Gateway, Private Endpoints, Private DNS, load balancing, and routing solutions.Implement and operationalize resilient Azure connectivity and failover patterns aligned to enterprise uptime and resiliency requirements.Troubleshoot complex Azure networking and connectivity issues across cloud environments.Work with IT and business stakeholders to understand requirements and ensure solutions align with mature cloud and IT operational practices.Ensure system performance and efficiency provide the highest levels of quality for internal and external user experiences.Design and implement resilient Azure network architectures aligned to FFIEC guidance, business continuity objectives, and enterprise uptime requirements.Support and operationalize multi-region Azure resiliency strategies for critical platforms and services, including deterministic failover and recovery patterns.Improve operational reliability through standardized network architecture, observability, monitoring, alerting, and incident response practices.Participate in disaster recovery exercises, failover testing, and root cause analysis while advocating for architecture decisions that improve long-term scalability, recoverability, and operational stability.Help mature Azure platform operations in alignment with Microsoft Cloud Adoption Framework (CAF) principles.Support standardization, governance, and operational consistency across Azure environments.Implement Azure-native deployment standards using Bicep, ARM templates, Azure Policy, and CI/CD pipelines.Work to streamline and automate operational processes using Azure Automation, PowerShell, Power Automate, and Azure-native tooling.Improve operational visibility using Azure-native monitoring and analytics capabilities.Develop and maintain technical documentation, operational standards, runbooks, diagrams, and procedures.Ensure the reliability, availability, and security of Azure services by implementing secure cloud patterns aligned to Zero Trust principles.Collaborate with Information Security teams to support regulatory compliance, vulnerability remediation, segmentation strategies, and audit readiness.Support secure private connectivity for Azure-native and SaaS services, including Microsoft Fabric initiatives where applicable.Conduct regular audit reviews, access control validation, and remediation activities to maintain compliance requirements.Support and develop Microsoft Fabric solutions including data pipelines, lakehouses, semantic models, workspace administration, and capacity management.Collaborate with data and analytics teams to support scalable, governed data platforms integrated with Azure services.Provide mentorship and technical guidance to engineering teams.Participate in architecture and design reviews.Advocate for operational best practices and challenge technical implementations when appropriate using sound engineering reasoning.Work collaboratively across Infrastructure, Security, Cloud Engineering, DevOps, and Application teams to align technical solutions with enterprise objectives.Demonstrate strong engineering judgment and the ability to adapt when presented with stronger technical or operational approaches.Expanded Responsibilities – BAU Operations & SupportIn addition to strategic infrastructure work, the Cloud Infrastructure Engineer plays a critical role in day-to-day Business As Usual (BAU) operational support. This includes ensuring operational continuity, managing user-level support escalations, and optimizing existing infrastructure resources.Handling daily support tickets related to Azure services, Entra ID, virtual machines, and performance troubleshooting.Provisioning and managing virtual desktop infrastructure (VDI) instances in Azure, including base image management and access control setup.Assisting senior engineering staff in operational maintenance tasks including patch compliance reviews, backup monitoring, and performance tuning.Participating in routine cloud operations such as onboarding automation, runbook documentation, cost optimization tracking, and performance alert triage.Executing and documenting DR readiness steps and root cause analysis for production-impacting events.Coordinating with Tier 1 support teams to ensure efficient escalation handling and operational support visibility.Ensuring compliance of Azure resources through tagging, configuration reviews, and policy validation.These responsibilities strengthen the team’s support structure, improve SLA adherence, and help maintain stable, secure, and cost-optimized cloud operations.What Do You Need?Minimum of 5 years of enterprise cloud infrastructure and engineering experience with a strong focus on Azure.Strong hands-on experience with Azure networking, routing and DNS, network security, and multi-region Azure environments.Deep operational understanding of ExpressRoute, private networking, routing and failover behavior, and Azure connectivity patterns.Extensive experience with Azure cloud platforms and Azure-native operational best practices.Experience designing, implementing, and supporting operationally mature Azure environments.Strong troubleshooting skills across Azure and enterprise networking environments.Hands-on proficiency with Infrastructure as Code (IaC), with Bicep as the primary authoring language.Experience using ARM templates, Azure Policy, CI/CD pipelines, and Azure-native deployment standards.Familiarity with Microsoft Cloud Adoption Framework (CAF) concepts and operational maturity principles.Experience using Azure-native monitoring and troubleshooting tools including Azure Monitor, Network Watcher, Traffic Analytics, Log Analytics, and Splunk.Strong understanding of Zero Trust networking and cloud security principles.Experience with Microsoft Entra ID, hybrid identity integration, and enterprise authentication patterns.Familiarity with Azure PaaS and IaaS services including Azure SQL, App Services, VMs, Key Vault, and Storage services.Demonstrated experience with Microsoft Fabric including workspace administration, capacity management, data pipelines, lakehouses, and integration with Power BI and Azure Data Lake.Proficiency in scripting languages such as PowerShell and Python for automation and operational support.Experience with Linux and Windows operating systems in Azure environments.Excellent analytical, troubleshooting, communication, and documentation skills.Ability to collaborate effectively across technical teams and contribute constructively to architecture and operational discussions.Bachelor’s degree in Computer Science, Information Technology, or equivalent experience.Azure certifications are highly desirable; practical expertise and operational experience are prioritized.Experience in regulated industries with the ability to create operational and compliance artifacts supporting audits and regulatory requirements.Technology Skills:Proficient in Azure cloud services and Azure-native operational tooling.Strong operational knowledge of Azure networking and connectivity services.Hands-on experience with Bicep-based infrastructure deployments and Azure-native governance controls.Experience with monitoring, observability, and logging tools including Azure Monitor, Log Analytics, and Splunk.Familiarity with cloud security tooling and compliance frameworks supporting regulated environments.Experience supporting Microsoft Fabric within governed enterprise Azure environments.Familiarity with CI/CD tools and processes supporting infrastructure and platform deployments.Understanding of identity and access management (IAM), encryption, and Zero Trust security principles.Ability to troubleshoot and resolve Azure platform, networking, and integration issues.Familiarity with Agile, Scrum, or related project delivery methodologies.Familiarity with AI and automation tools that support productivity, workflow efficiency, and client engagement.Customers Bank is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.We also provide “reasonable accommodations”, upon request, to qualified individuals with disabilities, in accordance with the Americans with Disabilities Act and applicable state and local laws. Diversity Statement:At Customers Bank, we believe in working smart, working together, and having fun while delivering innovative solutions and memorable experiences for our customers. We are committed to the continual advancement of a culture which reflects the value we place on diversity, equity, and inclusion. We honor the diverse experiences, perspectives, and identities of our team members, and we recognize that it is their passion, creativity, and integrity that drives our success. Step into your future with us! Let’s take on tomorrow.SummaryLocation: Malvern, PAType: Full time