Azure Cloud Engineer

Arctiq•Blue Bell, PA

9h•Hybrid

About The Position

This is a direct-hire, permanent opportunity with one of Arctiq’s clients. The Cloud Infrastructure Engineer will operate, protect, and improve an enterprise Azure environment as it transitions to infrastructure managed entirely as code and delivered through pipelines, guided by the Microsoft Cloud Adoption Framework (CAF). The role combines hands-on engineering with routine infrastructure operations and support in a regulated financial services environment governed by NIST and FFIEC standards. The position requires onsite work Monday through Thursday at the client’s Malvern, Pennsylvania office, with remote work on Friday. The engineer will maintain Azure workloads and networking, implement infrastructure as code and automation, improve monitoring and resilience, support compliance and security controls, and provide escalated operational support. The role also supports Microsoft Fabric infrastructure, contributes to audit readiness and disaster recovery, mentors engineers, and participates in an on-call rotation.

Requirements

At least 5 years of enterprise cloud infrastructure and engineering experience, primarily with Azure.
Strong Azure networking skills, including network security groups, routing, DNS, Private Link, and hybrid connectivity troubleshooting.
Hands-on proficiency with Bicep, ARM templates, and Azure Policy; experience with Git-based workflows such as branching, pull requests, and code review, and CI/CD infrastructure deployment.
Troubleshooting experience with Azure Monitor, Log Analytics (KQL), and Network Watcher.
Solid understanding of Zero Trust and cloud security, including experience with Entra ID, hybrid identity, RBAC, managed identities, and Key Vault.
Operational experience with Azure IaaS and PaaS, including virtual machines, App Services, Azure SQL, and Storage on Windows and Linux.
Proficiency in PowerShell and Azure CLI for automation and support.
Working knowledge of formal change management (ITIL or equivalent) and ServiceNow; familiarity with Agile or Scrum and monitoring and logging tools.
Excellent analytical, troubleshooting, communication, and documentation skills, and a commitment to continuous learning.
Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
Experience in a regulated industry, including producing compliance evidence aligned to NIST or FFIEC.
Ability to work onsite Monday through Thursday at the Malvern, Pennsylvania office and remotely on Friday.
Participation in an on-call rotation, including responding to critical alerts during and after business hours.

Nice To Haves

Experience with Microsoft Fabric or related Azure data services such as Synapse or Data Lake, including gateways and private connectivity.
Advanced Bicep module design and pipeline authoring in Azure DevOps or GitHub Actions.
Experience with Defender for Cloud and security baseline hardening using CIS or Microsoft baselines; familiarity with CAF and Azure landing zones.
Experience managing Azure Virtual Desktop and Dev Box images and host pools.
Experience with ExpressRoute failover behavior and multi-region network resiliency.
Python scripting.
Azure certifications such as AZ-104, AZ-305, AZ-400, AZ-500, or AZ-700; practical expertise is valued over certifications.

Responsibilities

Maintain enterprise-scale Azure workloads and contribute to architecture and design reviews, applying best practices for architecture, security, efficiency, governance, and CAF-aligned operations.
Codify Azure Policy and enforce landing-zone standards for management groups, subscriptions, role-based access control, and tagging in coordination with Cloud Architecture.
Manage spoke-level hub-and-spoke networking, including network security groups, private endpoints, private DNS, and routing; enable secure connectivity for monitoring and operational tools with Network Engineering and Information Security.
Troubleshoot connectivity involving DNS, routing, network security groups and firewall rules, private endpoints, Azure Firewall, Application Gateway/WAF, load balancers, and ExpressRoute.
Implement multi-region resiliency for critical platforms; run disaster recovery and failover tests, perform root cause analysis, and improve scalability, recoverability, and stability in line with business continuity expectations.
Build and maintain Azure infrastructure as code using Bicep and reusable modules, deploying through CI/CD pipelines with peer review and pre-deployment validation.
Move existing environments to code-managed deployments by importing resources and correcting configuration drift.
Automate recurring tasks with PowerShell, Azure CLI, Azure Automation, and pipelines, replacing manual processes where practical.
Improve visibility using Azure Monitor, Log Analytics and KQL, workbooks, and actionable alerts.
Maintain documentation, runbooks, standards, and architecture diagrams, versioning them with code where practical.
Apply Zero Trust patterns using Entra ID, Privileged Identity Management, managed identities, Key Vault, and network segmentation.
Partner with Information Security on compliance, vulnerability remediation, segmentation, and audit readiness; conduct access reviews, validate configurations and policies, and provide evidence for internal audits and regulatory examinations.
Harden workloads to CIS and Microsoft baselines and track security posture with Defender for Cloud and regulatory compliance initiatives.
Support Microsoft Fabric infrastructure, including private connectivity, cloud and on-premises data gateways, workspace administration, and capacity management.
Mentor engineers on infrastructure as code, Azure operations, and engineering best practices.
Provide second- and third-tier support for Azure services, Entra ID, virtual machines, and performance issues; coordinate with the service desk and NOC to route and resolve escalations.
Assist senior engineers with patch compliance reviews, backup monitoring, and performance tuning; contribute to onboarding automation, runbooks, and alert triage.
Document disaster recovery readiness steps and root cause analyses for production-impacting events.
Participate in the on-call rotation, responding to critical alerts during and after business hours and escalating as needed.
Prepare and execute ServiceNow changes with documented plans, testing, validation, and backout steps.
Verify Azure resource compliance through tagging, configuration reviews, and policy validation.