Cloud Platform Engineer – Azure & Kubernetes

InvoiceCloud•Boston, MA

13h•$90,000 - $105,000

About The Position

We are seeking a skilled and proactive Cloud Platform Engineer to design, deploy, and operate Azure-native infrastructure powering InvoiceCloud’s enterprise SaaS platform. You will own AKS clusters and supporting services, implement infrastructure as code with Terraform/Ansible, and optimize Azure networking (VNets, NSGs, load balancers, VPNs) for scale and resiliency. The role integrates Cloudflare (DNS, CDN, WAF, Zero Trust) to secure and accelerate edge traffic and partners closely with application teams running Windows/IIS and modern & legacy .NET workloads. You will enhance CI/CD pipelines, establish robust monitoring/alerting with Azure Monitor and Log Analytics, and uphold governance (e.g., RBAC, policies) across environments. As part of the on-call rotation, you will lead incident response, drive root cause analysis, and implement preventive automation to improve reliability over time.

Requirements

5+ years in cloud engineering focused on Microsoft Azure; strong hands-on AKS/Kubernetes and containerized workloads.
Windows Server, IIS, and .NET Framework/Core application support.
Terraform (expert), Ansible (deployment/config), scripting in PowerShell/Bash/Python.
Azure VNets/NSGs/Load Balancers/VPNs; Cloudflare DNS/CDN/WAF/Zero Trust.
CI/CD (GitHub Actions or Azure DevOps), monitoring/troubleshooting (Azure Monitor, Log Analytics; familiarity with Prometheus/Grafana/New Relic a plus).
Compliance mindset; knowledge of Azure Policy, Blueprints, and RBAC preferred; excellent problem-solving and communication skills.

Nice To Haves

Azure AZ-104, AZ-305, AZ-400

Responsibilities

Deliver reliable AKS platforms and Azure networking that meet availability, performance, and security objectives; validate outcomes with actionable SLOs and dashboards.
Execute changes through CI/CD with rigorous testing and phased rollouts to minimize risk while meeting delivery timelines.
Lead incident response to rapid resolution, capture learnings, and implement durable fixes that measurably reduce repeat issues.
Own end-to-end IaC (Terraform modules, Ansible playbooks) and AKS baselines; maintain versioned patterns that teams can consume with confidence.
Anticipate platform needs (capacity, security posture, cost) and drive proposals that balance reliability, performance, and spend.
Partner with dev/security/ops to align on standards (RBAC, policies, WAF/Zero Trust rules) and ensure consistent, compliant environments.
Standardize and templatize Terraform for reusable, secure-by-default provisioning; automate day-2 ops (scaling, patching, backups).
Improve CI/CD throughput with environment promotions, automated validations, and safe rollbacks for .NET/IIS and containerized apps.
Optimize observability (Azure Monitor/Log Analytics; optional Prometheus/Grafana/New Relic) to cut MTTR and reduce alert noise.
Evaluate and implement Azure/AKS and Cloudflare capabilities (e.g., Zero Trust, WAF tuning, ingress add-ons) that enhance resilience and security.
Use GenAI assistants for runbook drafts and postmortem synthesis; apply policy-as-code and scripted remediations to auto-heal common failure modes and accelerate root cause analysis.
Pilot observability and performance-testing improvements that inform capacity planning and right-sizing decisions.