Cloud Engineer

About the Role We are looking for an experienced Cloud Engineer to join our Cloud & Platform Engineering team. In this hands-on role, you will design, build, and operate the enterprise Azure platform and shared services that our product and delivery teams build on — spanning our assessment delivery, exam development, and Certiport product lines. You will use Infrastructure as Code, automation, and platform engineering practices to improve the security, consistency, reliability, and developer experience of our cloud estate, which operates under rigorous security and compliance requirements. This is a highly technical, engineering-focused role that combines cloud platform development, automation, security and governance, and site reliability. You will also participate in an on-call rotation supporting business-critical cloud services. What You’ll Do Cloud & Platform Engineering Design, build, and operate shared cloud platform services on Microsoft Azure that product teams consume for provisioning, deployment, and day-to-day operations.Develop reusable platform capabilities, modules, templates, and pipelines — that accelerate secure, self-service cloud adoption.Design and manage enterprise cloud networking and connectivity, including hub-and-spoke topologies, next-generation firewalls, DNS, VPN, peering, and secure administrative access.Build and operate Azure Kubernetes Service (AKS) clusters and Helm-based application delivery for shared platform and product workloads.Provision and manage Azure PaaS and data services, including Key Vault, Storage, Azure SQL and MySQL, Cosmos DB, Redis, and Event Hub, with private, secure connectivity.Manage secure ingress and content delivery services, including Application Gateway/WAF, Azure Front Door, API Management, and CDN.Maintain golden VM images and hardened infrastructure baselines.Infrastructure as Code & Automation Build and maintain Terraform-based provisioning frameworks and shared modules.Develop automation with Ansible, Python, PowerShell, Bash, and cloud-native APIs.Create and maintain CI/CD pipelines using GitOps practices, and help modernize tooling (including migrating pipelines from Azure DevOps to GitHub).Drive modernization through an automation-first approach that reduces manual operations.Security, Governance & Compliance Design and manage identity and access using Microsoft Entra ID, including role-based access control, Privileged Identity Management (PIM), Conditional Access, and phishing-resistant MFA.Own certificate and PKI services, including internal/private certificate authorities, cert-manager, certificate issuance, rotation, and trust distribution, and Azure Key Vault.Translate security and compliance requirements into cloud-native guardrails and standards, and support audit and compliance programs such as PCI DSS and FedRAMP.Harden Windows and Linux baselines to CIS/STIG benchmarks and remediate vulnerability and penetration-test findings.Improve cloud security posture using tooling such as Cloud Security Posture Management (CSPM) and continuous compliance monitoring, partnering with Security and Architecture teams on least-privilege, audit-ready access models.Reliability & Operations Operate and support business-critical cloud platform services and participate in an on-call rotation.Implement robust observability, monitoring, logging, alerting, and dashboard, across the platform.Lead incident response, root-cause analysis, and remediation, and drive reliability and performance improvements.Own patch orchestration and vulnerability remediation across Windows and Linux fleets.Support release and change management, including outage-less deployment patterns such as blue/green and rolling deployments.Partner with FinOps to identify and implement cloud cost-optimization opportunities.Technical Leadership Act as a subject-matter expert for Azure cloud and platform engineering.Provide code reviews and quality assurance on team members’ automation and infrastructure work.Mentor engineers and contribute to engineering standards and best practices.Participate in agile ceremonies and contribute stories and defects to the team’s backlog.Explore and apply AI-assisted and agentic tooling to streamline cloud operations, troubleshooting, and documentation.Required Knowledge & Experience Bachelor’s degree in Computer Science or a related field, or equivalent practical experience.5+ years in Cloud Engineering, Platform Engineering, DevOps, SRE, or Infrastructure Engineering.3+ years of hands-on experience with Microsoft Azure cloud services and architecture.3+ years building Infrastructure as Code, with strong hands-on Terraform experience.Strong experience automating infrastructure with Ansible and scripting in Python, PowerShell, and/or Bash.Hands-on experience with Kubernetes (ideally AKS) and Helm.Experience with CI/CD pipelines and GitOps practices (Azure DevOps, GitHub, GitHub Actions).Solid understanding of cloud networking, security, identity, and governance.Experience with Windows and Linux operating system configuration, automation, and managementExperience with patch orchestration and vulnerability remediation.Excellent written and verbal communication, technical analysis, and problem-solving skills.Ability to learn new technologies quickly and work effectively in a collaborative, agile team.Preferred Knowledge & Experience Azure identity and governance tooling (Entra ID, PIM, Conditional Access)Certificate and PKI management, including private certificate authorities, cert-manager, and certificate automation.Azure PaaS and data services (e.g. Key Vault, Storage, Cosmos DB, Azure SQL/MySQL, Redis, Event Hub, Data Factory).Azure API Management, Application Gateway/WAF, Azure Front Door, and CDN (including Akamai or Cloudflare).Enterprise networking with next-generation firewalls (e.g., Fortinet) in hub-and-spoke topologies.Compliance and hardening experience, PCI DSS, FedRAMP, CIS/STIG benchmarks,and penetration-test remediation.Cloud cost management / FinOps.Observability and analytics tooling such as New Relic, Zabbix, Grafana, or Splunk.Cloud Security Posture Management (e.g., Wiz) and Microsoft Defender for Cloud.Container tooling and image build automation (Docker, Azure Container Registry, Packer), and build/CI platforms such as GitHub Actions or TeamCity.Cloud-based high availability and disaster recovery design.Cross-cloud identity federation and workload identity (e.g., OIDC to AWS) and exposure to multi-cloud environments.Internal developer platform (IDP) or Cloud Center of Excellence (CCoE) practices.Interest in applying AI-powered operational tooling or agentic automation, and supporting emerging AI/ML workloads.