Cloud Engineering Senior

Cloud Engineering Position

Clayco is a full-service, turnkey real estate development, master planning, architecture, engineering, and construction firm that safely delivers clients across North America the highest quality solutions on time, on budget, and above and beyond expectations. With $8.1 billion in revenue for 2025, Clayco specializes in the "art and science of building," providing fast track, efficient solutions for mission critical, industrial, life sciences, power & energy, aviation, commercial, institutional, residential and sports & entertainment related building projects.

Cloud Engineering owns the day-to-day operation, evolution, and reliability of our cloud estate. The majority runs in Azure (application gateways, App Service Environments, storage, contains, Functions, VMs, and Azure SQL), with traditional lift-and-shift constructs still doing real work alongside more modern patterns. AWS is a meaningful and growing part of the picture too. This role brings modern IaC, automation, and engineering discipline to the cloud estate directly, and helps raise the bar on what "production-ready" looks like here. This is an AI-forward position. Senior leadership is all-in on AI, and we want someone who genuinely uses it every day for code, troubleshooting, documentation, and reasoning. Everything you build and operate has one measure: is the cloud estate more reliable, more secure, more cost-efficient, and more transparent than it was yesterday?

App Service and ASE, Azure Storage, Azure SQL Database and Managed Instance, Azure Functions, VMs and VM Scale Sets, and container workloads on AKS, ACI, and ACR. The same patterns apply to AWS workloads where they run there.

Own application-layer traffic for the workloads you run (Application Gateway, Load Balancer, Front Door, Traffic Manager in Azure today; AWS equivalents follow the same patterns), partnering with Network Engineering on the underlying connectivity.

Operate, troubleshoot, and tune workloads for performance, capacity, cost, and security posture. Drive disciplined improvement of existing lift-and-shift workloads: Ship infrastructure with Terraform as the primary tool. Use Ansible for configuration management and Packer for image baking; treat golden images, hardened baselines, and post-provision configuration as code, not one-off changes.

Apply the same discipline to AWS, using CloudFormation and Terraform with consistent cross-cloud patterns.

Use AI tooling (GitHub Copilot, ChatGPT, Claude, agent frameworks) every day for code, IaC, troubleshooting, log analysis, and documentation. Build AI-assisted automation into operational work: incident triage, runbook execution, drift detection, change summarization, cost analysis. Defender for Cloud findings, Key Vault hygiene, identity and access patterns (Entra ID, managed identities, RBAC), policy as code, secret handling, and network segmentation.

Build observability into everything you ship: dashboards, monitors, and SLOs defined as code, with alerts that tell on-call what's actually wrong at 2 AM. Strong experience with any modern observability platform translates.

Tag discipline, reservations, scaling policies, and steady right-sizing, not heroic quarterly cleanups.

Contribute to disaster recovery and business continuity patterns (backups, failover, recovery testing) built into the infrastructure rather than bolted on.

App Service/ASE, Storage, AKS/containers, Functions, VMs, Azure SQL, and app-layer traffic. Working knowledge of Azure networking (VNets, NSGs, Private Endpoints, hybrid connectivity, DNS), sufficient to design well-formed workloads and collaborate effectively with Network Engineering.

Scripting and automation: clean PowerShell, Python, or Bash to automate work and eliminate toil.

Familiarity with AWS. Productive with EC2, VPC, S3, RDS, Lambda, and IAM, with consistent cross-cloud patterns. AI-forward mindset: actively using AI tools (Copilot, ChatGPT, Claude) as daily multipliers, with a real perspective on where they add leverage and where they don't.

Strong bias to action: you ship the change, iterate, learn through the work instead of waiting for the perfect spec.

Cloud-first modernization experience: you have taken existing lift-and-shift workloads and rearchitected them toward PaaS, containers, serverless, and managed services where it makes sense.

AKS/EKS/Kubernetes operations.

Azure DevOps and/or GitHub Actions for delivery pipelines.

FinOps experience: cost visibility, chargeback, optimization at portfolio scale.

Security and policy tooling: Defender for Cloud, Azure Policy, tfsec/checkov/Trivy.

Workflow automation platforms (e.g. n8n) or interest in agent-style automation.

Our clients and projects are nationwide - travel will be required.

We work on creative, complex, award-winning, high-profile jobs.

Candidates selected for this position will be subject to a comprehensive background check, which includes mandatory drug testing.

2025 ENR Top 400 – Top Data Center Contractor (Top 3).

2025 ENR Top 100 Design-Build Firms – Design-Build Contractor (Top 5).

2025 ENR Top 100 Green Contractors – Green Contractor (Top 3).

Discretionary Annual Bonus: Subject to company and individual performance.

Medical, dental and vision plans, 401k, generous PTO and paid company holidays, employee assistance program, flexible spending accounts, life insurance, disability coverage, learning & development programs and more!

Education, qualifications, skills, training, experience, certifications, internal equity, and location.