Azure Cloud Engineer

Arctiq • Whitpain Township, PA

2d • $125,000 - $135,000 • Hybrid

About The Position

Arctiq is hiring a Cloud Infrastructure Engineer for a direct-hire, permanent opportunity with one of its clients. The role is based in Malvern, Pennsylvania, with onsite work Monday through Thursday and remote work on Friday.

The engineer will operate, protect, and improve an enterprise Azure environment in a regulated financial-services setting. The environment is moving toward infrastructure defined as code and deployed through pipelines, guided by the Microsoft Cloud Adoption Framework (CAF). The work combines hands-on engineering with routine operational support and requires adherence to NIST and FFIEC standards.

The role covers Azure platform engineering, networking, reliability, hybrid connectivity, cloud governance, infrastructure as code, automation, monitoring, security, compliance, and support. The engineer will also support Microsoft Fabric infrastructure, participate in disaster-recovery testing and on-call response, prepare ServiceNow changes, maintain operational documentation, and mentor other engineers.

Requirements

• At least 5 years of enterprise cloud infrastructure and engineering experience, primarily with Azure.
• Strong Azure networking skills, including NSGs, routing, DNS, Private Link, and hybrid connectivity troubleshooting.
• Hands-on proficiency with Bicep, ARM templates, and Azure Policy; experience with Git-based workflows such as branching, pull requests, and code review, and with CI/CD infrastructure deployment.
• Troubleshooting experience with Azure Monitor, Log Analytics (KQL), and Network Watcher.
• Solid understanding of Zero Trust and cloud security, with experience in Entra ID, hybrid identity, RBAC, managed identities, and Key Vault.
• Operational experience with Azure IaaS and PaaS, including VMs, App Services, Azure SQL, and Storage on Windows and Linux.
• Proficiency in PowerShell and Azure CLI for automation and support.
• Working knowledge of formal change management (ITIL or equivalent) and ServiceNow; familiarity with Agile or Scrum and monitoring and logging tools.
• Strong analytical, troubleshooting, communication, and documentation skills, with a commitment to continuous learning.
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• Experience in a regulated industry, including producing compliance evidence aligned to NIST or FFIEC.

Nice To Haves

• Experience with Microsoft Fabric or related Azure data services such as Synapse and Data Lake, including gateways and private connectivity.
• Advanced Bicep module design and pipeline authoring in Azure DevOps or GitHub Actions.
• Experience with Defender for Cloud and security baseline hardening to CIS or Microsoft standards; familiarity with CAF and Azure landing zones.
• Experience managing Azure Virtual Desktop and Dev Box images and host pools.
• Knowledge of ExpressRoute failover behavior and multi-region network resiliency.
• Python scripting.
• Azure certifications such as AZ-104, AZ-305, AZ-400, AZ-500, or AZ-700; practical expertise is valued over certifications.

Responsibilities

• Maintain enterprise-scale Azure workloads and apply architecture, security, efficiency, and governance best practices; participate in architecture and design reviews and help mature operations in line with CAF.
• Codify Azure Policy for landing zone standards covering management groups, subscriptions, RBAC, and tagging, in collaboration with Cloud Architecture.
• Manage spoke-level networking in a hub-and-spoke model, including NSGs, Private Endpoints, Private DNS, and routing; enable secure connectivity for monitoring and operational tools with Network Engineering and Information Security.
• Troubleshoot connectivity involving DNS, routing, NSG and firewall rules, private endpoints, Azure Firewall, Application Gateway/WAF, load balancers, and ExpressRoute.
• Implement multi-region resiliency for critical platforms; conduct disaster-recovery and failover tests, perform root cause analysis, and promote scalable, recoverable, and stable designs that meet FFIEC business continuity expectations.
• Build and maintain Azure infrastructure as code using Bicep and reusable modules, deployed through CI/CD pipelines with peer review and pre-deployment validation; import existing resources and address configuration drift to move environments to code-managed deployments.
• Automate recurring tasks with PowerShell, Azure CLI, Azure Automation, and pipelines, reducing manual processes where practical.
• Improve operational visibility using Azure Monitor, Log Analytics and KQL, workbooks, and actionable alerts.
• Maintain documentation, runbooks, standards, and architecture diagrams, versioning them with code where practical.
• Apply Zero Trust patterns using Entra ID, Privileged Identity Management, managed identities, Key Vault, and network segmentation.
• Work with Information Security on compliance, vulnerability remediation, segmentation, and audit readiness; conduct access reviews, validate configurations and policies, and produce evidence for audits and regulatory examinations.
• Harden workloads to CIS and Microsoft baselines and track security posture with Defender for Cloud and regulatory compliance initiatives.
• Support Microsoft Fabric infrastructure, including private connectivity, cloud and on-premises data gateways, workspace administration, and capacity management.
• Mentor engineers on infrastructure as code, Azure operations, and engineering best practices.
• Provide second- and third-tier support for Azure services, Entra ID, virtual machines, and performance issues; coordinate with the service desk and NOC on escalations.
• Assist senior engineers with patch compliance reviews, backup monitoring, and performance tuning; contribute to onboarding automation, runbooks, and alert triage.
• Document disaster-recovery readiness steps and root cause analysis for production-impacting events.
• Participate in the on-call rotation, responding to critical alerts during and after business hours and escalating as needed.
• Prepare and execute ServiceNow changes with documented plans, testing, validation, and backout steps.
• Verify Azure resource compliance through tagging, configuration reviews, and policy validation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level