Cloud Engineer

Office Ally•Vancouver, WA

76d•$100,000 - $125,000•Remote

About The Position

The Cloud Engineer is responsible for designing, implementing, and managing cloud solutions based on Microsoft Azure. This is a hands-on role serving as a key technical contributor to our cloud platform spanning Platform as a Service (PaaS) services, Azure Kubernetes Service (AKS), networking, and ensuring the scalability, reliability, and security of our Azure cloud infrastructure. This role works closely with cross-functional teams including application development, security, and operations to build resilient cloud environments that meet organizational needs and compliance obligations including SOC 2 and HIPAA.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience or relevant industry certifications.
3+ years of experience in a cloud engineering role with demonstrated proficiency in implementing, designing, and managing Microsoft Azure solutions
Deep understanding of Azure cloud services including Azure Virtual Machines, Azure Networking, Azure Storage, Azure Databases, Azure Security, and Azure DevOps
Proficiency in Azure infrastructure as code tools including Terraform (required) and Bicep or ARM templates
Demonstrated knowledge of cloud security best practices, identity and access management (IAM), encryption, network security, and compliance standards (HIPAA, SOC 2)
Experience operating AKS or self-managed Kubernetes in production environments
Solid Azure networking fundamentals including VNets, NSGs, Private Endpoints, DNS, and load balancing
Familiarity with Azure Entra ID, RBAC, Managed Identities, and service principals
Experience building CI/CD pipelines with Azure DevOps (or equivalent, e.g., GitLab CI)
Scripting proficiency in Bash and/or Python for automation and tooling
Strong communication and collaboration skills with the ability to interact effectively with cross-functional teams, stakeholders, and vendors

Nice To Haves

Healthcare, SaaS, or regulated industry experience
Azure certifications such as AZ-104, AZ-305, AZ-500, AZ-700, or CKA/CKAD
Experience with GitOps tooling such as Flux or ArgoCD
Familiarity with policy-as-code tools including Checkov, OPA/Gatekeeper, and Azure Policy
Exposure to secrets management platforms such as HashiCorp Vault, Azure Key Vault, and External Secrets Operator
Experience with FinOps practices and Azure cost optimization tooling
Familiarity with Windows Server, Active Directory, and hybrid identity scenarios

Responsibilities

Design and deploy Azure cloud solutions including virtual machines, virtual networks, storage accounts, databases, and PaaS services to meet business and technical objectives
Configure and optimize Azure resources for performance, scalability, and cost-efficiency using automation tools, scripting languages, and infrastructure as code (IaC) techniques including Terraform and Bicep
Manage Azure DevOps pipelines and CI/CD workflows to automate software delivery, infrastructure provisioning, and deployment activities
Design and operate PaaS workloads using Azure App Service, Azure Functions, Azure SQL, Azure Service Bus, Azure Storage, and Event Hub
Evaluate and onboard new PaaS offerings aligned with workload requirements, cost targets, and compliance obligations
Manage Azure Key Vault, App Configuration, and Managed Identities for secrets and configuration lifecycle
Implement and manage Azure governance policies, security controls, and compliance standards to ensure confidentiality, integrity, and availability of cloud resources
Administer AKS clusters including node pool scaling, upgrades, and RBAC configuration
Implement and maintain ingress controllers, network policies, workload identity, and pod security standards
Integrate AKS with Azure Container Registry, Key Vault CSI Driver, External Secrets Operator, and monitoring tooling
Collaborate with development teams on Helm chart packaging, GitOps patterns, and service mesh considerations
Design and manage Azure virtual networks, subnets, NSGs, route tables, VNet peering, and Private Endpoints
Configure and maintain Azure Firewall, Application Gateway, Azure Front Door, and VPN Gateway
Implement and troubleshoot DNS architecture including Azure Private DNS Zones and hybrid DNS resolution
Support hub-and-spoke or Virtual WAN topologies across production, staging, and development environments
Apply zero-trust networking principles, least-privilege IAM, and conditional access policies across the Azure tenant
Configure and tune Microsoft Defender for Cloud, Microsoft Sentinel integration, and Azure Security Center recommendations
Support SOC 2 and HIPAA compliance obligations through evidence collection, control implementation, and audit readiness
Participate in vulnerability management, patch lifecycle governance, and security incident response
Build and maintain monitoring, alerting, and dashboards using Azure Monitor, Log Analytics, and Application Insights
Monitor and troubleshoot Azure cloud environments, proactively identifying and resolving performance issues, availability disruptions, and security vulnerabilities
Participate in cloud migration projects, workload migrations, and hybrid cloud integrations, ensuring seamless transitions and minimal disruption to business operations
Document Azure cloud configurations, procedures, and troubleshooting steps, maintaining accurate records and knowledge base articles to facilitate knowledge sharing