Cloud Infrastructure Engineer

Customers Bank•Malvern, PA

About The Position

Customers Bank is seeking a Senior Cloud Infrastructure Engineer to operationalize secure, scalable, and resilient Azure platform services in support of enterprise modernization and Microsoft Cloud Adoption Framework operational maturity goals. The role focuses on Azure platform engineering, networking, operational reliability, and cloud governance, with hands-on engineering, troubleshooting, automation, and cross-team collaboration. The engineer is expected to advocate for sound technical practices, challenge weak implementations constructively, and adapt when stronger approaches are presented. The position maintains enterprise-scale Azure solutions and designs, implements, supports, and maintains multi-region Azure networking and connectivity, including resilient failover and recovery patterns. It advances operational reliability through standardized architecture, monitoring, alerting, incident response, disaster recovery exercises, failover tests, and root cause analysis. It also helps standardize Azure governance and operations through Bicep and other deployment standards, Azure Policy, CI/CD, automation, documentation, and operational procedures. The engineer supports secure Azure services aligned with Zero Trust principles, regulatory compliance, vulnerability remediation, segmentation, access reviews, and audit readiness. The role also supports Microsoft Fabric solutions and governed data platforms, collaborating with data and analytics teams. It provides mentorship and technical guidance, participates in architecture and design reviews, and works with infrastructure, security, cloud engineering, DevOps, application, and business teams. Alongside strategic infrastructure work, the role provides day-to-day business-as-usual operational support. This includes handling Azure, Entra ID, virtual machine, and performance tickets; provisioning Azure virtual desktop instances; assisting with patch, backup, and performance maintenance; supporting onboarding automation, runbooks, cost tracking, and alert triage; documenting disaster recovery readiness and production-event root causes; coordinating escalations with Tier 1 support; and validating resource tagging, configuration, and policy compliance. Candidates must be legally eligible to work in the United States without sponsorship, now or in the future. Customers Bank describes itself as a super-community bank founded in 2009 with over $22 billion in assets.

Requirements

At least 5 years of enterprise cloud infrastructure and engineering experience, with a strong focus on Azure.
Strong hands-on experience with Azure networking, routing and DNS, network security, and multi-region Azure environments.
Deep operational understanding of ExpressRoute, private networking, routing and failover behavior, and Azure connectivity patterns.
Extensive experience with Azure cloud platforms and Azure-native operational best practices.
Experience designing, implementing, and supporting operationally mature Azure environments.
Strong troubleshooting skills across Azure and enterprise networking environments.
Hands-on proficiency with Infrastructure as Code, with Bicep as the primary authoring language.
Experience using ARM templates, Azure Policy, CI/CD pipelines, and Azure-native deployment standards.
Familiarity with Microsoft Cloud Adoption Framework concepts and operational maturity principles.
Experience with Azure Monitor, Network Watcher, Traffic Analytics, Log Analytics, and Splunk.
Strong understanding of Zero Trust networking and cloud security principles.
Experience with Microsoft Entra ID, hybrid identity integration, and enterprise authentication patterns.
Familiarity with Azure PaaS and IaaS services, including Azure SQL, App Services, virtual machines, Key Vault, and Storage services.
Demonstrated Microsoft Fabric experience, including workspace administration, capacity management, data pipelines, lakehouses, and integration with Power BI and Azure Data Lake.
Proficiency in scripting languages such as PowerShell and Python for automation and operational support.
Experience with Linux and Windows operating systems in Azure environments.
Excellent analytical, troubleshooting, communication, and documentation skills.
Ability to collaborate across technical teams and contribute constructively to architecture and operational discussions.
Bachelor’s degree in Computer Science, Information Technology, or equivalent experience.
Experience in regulated industries and the ability to create operational and compliance artifacts supporting audits and regulatory requirements.
Proficiency in Azure cloud services and Azure-native operational tooling.
Strong operational knowledge of Azure networking and connectivity services.
Hands-on experience with Bicep-based infrastructure deployments and Azure-native governance controls.
Experience with monitoring, observability, and logging tools, including Azure Monitor, Log Analytics, and Splunk.
Familiarity with cloud security tooling and compliance frameworks supporting regulated environments.
Experience supporting Microsoft Fabric within governed enterprise Azure environments.
Familiarity with CI/CD tools and processes for infrastructure and platform deployments.
Understanding of identity and access management, encryption, and Zero Trust security principles.
Ability to troubleshoot and resolve Azure platform, networking, and integration issues.
Familiarity with Agile, Scrum, or related project delivery methodologies.
Familiarity with AI and automation tools that support productivity, workflow efficiency, and client engagement.
Must be legally eligible to work in the United States without sponsorship, now or in the future.

Nice To Haves

Azure certifications are highly desirable; practical expertise and operational experience are prioritized.

Responsibilities

Maintain enterprise-scale Azure solutions and follow cloud architecture, security, operational efficiency, and governance best practices.
Design, implement, support, and maintain Azure networking solutions across multi-region environments.
Engineer and support Virtual WAN, hub-and-spoke networking, ExpressRoute, NSGs, Azure Firewall, Application Gateway, Private Endpoints, Private DNS, load balancing, and routing solutions.
Implement and operationalize resilient Azure connectivity and failover patterns aligned with enterprise uptime and resiliency requirements.
Troubleshoot complex Azure networking and connectivity issues across cloud environments.
Work with IT and business stakeholders to understand requirements and align solutions with mature cloud and IT operational practices.
Ensure system performance and efficiency support high-quality internal and external user experiences.
Design resilient Azure network architectures aligned to FFIEC guidance, business continuity objectives, and enterprise uptime requirements.
Support and operationalize multi-region resiliency strategies for critical platforms and services, including deterministic failover and recovery patterns.
Improve operational reliability through standardized network architecture, observability, monitoring, alerting, and incident response practices.
Participate in disaster recovery exercises, failover testing, and root cause analysis, advocating for architecture that improves scalability, recoverability, and operational stability.
Help mature Azure platform operations in alignment with Microsoft Cloud Adoption Framework principles.
Support standardization, governance, and operational consistency across Azure environments.
Implement deployment standards using Bicep, ARM templates, Azure Policy, and CI/CD pipelines.
Streamline and automate operational processes using Azure Automation, PowerShell, Power Automate, and Azure-native tooling.
Improve operational visibility using Azure-native monitoring and analytics capabilities.
Develop and maintain technical documentation, operational standards, runbooks, diagrams, and procedures.
Implement secure cloud patterns aligned to Zero Trust principles to help ensure the reliability, availability, and security of Azure services.
Collaborate with Information Security teams on regulatory compliance, vulnerability remediation, segmentation strategies, and audit readiness.
Support secure private connectivity for Azure-native and SaaS services, including Microsoft Fabric initiatives where applicable.
Conduct audit reviews, access control validation, and remediation activities to maintain compliance.
Support and develop Microsoft Fabric solutions, including data pipelines, lakehouses, semantic models, workspace administration, and capacity management.
Collaborate with data and analytics teams on scalable, governed data platforms integrated with Azure services.
Provide mentorship and technical guidance to engineering teams.
Participate in architecture and design reviews; advocate for operational best practices and challenge implementations using sound engineering reasoning.
Collaborate across Infrastructure, Security, Cloud Engineering, DevOps, and Application teams to align solutions with enterprise objectives.
Handle daily support tickets related to Azure services, Entra ID, virtual machines, and performance troubleshooting.
Provision and manage Azure virtual desktop infrastructure instances, including base image management and access control setup.
Assist senior engineering staff with operational maintenance, including patch compliance reviews, backup monitoring, and performance tuning.
Participate in routine cloud operations, including onboarding automation, runbook documentation, cost optimization tracking, and performance alert triage.
Execute and document disaster recovery readiness steps and root cause analysis for production-impacting events.
Coordinate with Tier 1 support teams to improve escalation handling and operational support visibility.
Ensure Azure resource compliance through tagging, configuration reviews, and policy validation.