Cloud Engineer

Cloud Engineer

The Cloud Engineer role is a hands-on Azure expert responsible for day-to-day resource deployment and operational support across multiple subscriptions. They will engineer Terraform modules, automate with PowerShell, and apply architectural best practices for DR/HA, private networking, and monitoring.

Role Objectives

• Architect scalable Azure landing zones including governance, policy, networking, identity, monitoring, and security layers.
• Provision and manage Azure resources (App Service, VNets/Private Endpoints, Storage, Key Vault, PostgreSQL) following governance and tagging standards.
• Build and maintain Terraform modules with policy, RBAC, and diagnostics baked in; manage state/promotion and CI integration.
• Automate operational tasks with PowerShell via runbooks/functions and pipelines; reduce manual change and improve auditability.
• Design and validate DR/HA capabilities (Availability Zones, zone-redundant services, backup/restore, runbook failover testing) aligned to RTO/RPO.
• Harden and troubleshoot private networking (hub‐spoke, Private DNS, NSGs, Azure Firewall) and connectivity (VPN/ExpressRoute).
• Establish monitoring baselines with Azure Monitor/Log Analytics, build actionable dashboards/alerts, and integrate with ITSM for incidents/changes.
• Support data platform workloads (ADF/Databricks/PostgreSQL) for onboarding, monitoring, and pipeline troubleshooting.
• Drive FinOps practices (budgets, reservations, rightsizing) while maintaining SLAs and performance targets.
• Participate in Agile/SAFe ceremonies (standups, planning, retrospectives) and collaborate closely with developers, security, and networking teams.
• Contribute to documentation and knowledge bases, pair with peers and mentor where appropriate.
• Uphold secure-by-default practices (least privilege, managed identities, secrets-in-Key Vault) and tagging/governance standards.

Qualifications and Skills

• 5+ years of hands-on experience with Microsoft Azure across IaaS and PaaS services.

• Proficiency with Git-based workflows and Infrastructure as Code (Terraform; Bicep/ARM familiarity).

• Scripting experience (PowerShell required; Python nice to have) focused on automation and repeatability.

• Working knowledge of Azure networking (VNets, Private Endpoints/Private Link, DNS, NSGs) and identity (RBAC, managed identities).

• Experience with observability in Azure (Azure Monitor, Log Analytics, Application Insights) and alert hygiene.

• Strong interpersonal and communication skills with the ability to explain complex topics simply and build trust across teams.

• Advanced competence in Terraform (modules, workspaces/state, promotion) and PowerShell/Azure CLI automation.

• Applied architectural knowledge of Azure DR/HA patterns and private networking design.

• Proven experience operating Azure platforms at scale with ITSM alignment and strong monitoring discipline.

Preferred

• Microsoft certifications such as AZ-104 (Administrator) and AZ-305 (Solutions Architect).

• HashiCorp Terraform Associate certification.

• Experience in regulated or enterprise environments and with ITSM tools (e.g., ServiceNow).

• Experience working and collaborating in Atlassian Jira