Senior Azure Cloud Engineer

Vaxcyte•San Carlos, CA

3d•$163,000 - $191,000•Hybrid

About The Position

Vaxcyte is a clinical-stage vaccine innovation company engineering high-fidelity vaccines to protect humankind from the consequences of bacterial diseases. We are seeking a skilled and passionate Azure Cloud Engineer to join our growing engineering team. In this role, you will design, build, and maintain secure, scalable cloud infrastructure on Microsoft Azure, using Infrastructure as Code (IaC) best practices — primarily Terraform. You will collaborate with cross-functional teams to deliver reliable hosting solutions that meet the highest standards of security and compliance. The ideal candidate holds an Azure certification, brings strong software engineering fundamentals, and has hands-on experience with a broad range of Azure services. Experience in validated or regulated environments, particularly within the Life Sciences sector, is considered a valuable plus.

Requirements

Bachelor’s degree in computer science, Engineering, or related field (or equivalent experience) with a minimum of 5+ years of experience. Other combinations of education and/or experience may be considered.
Microsoft Azure certification (e.g. AZ-104, AZ-305, or equivalent) is required.
Proven experience with Terraform for provisioning and managing cloud infrastructure at scale.
Strong understanding of Azure networking: VNets, subnets, NSGs, private DNS, and firewall configurations.
Hands-on experience with Azure services: AKS, ADF, Managed SQL, VMs, and Batch Accounts.
Solid software engineering fundamentals: version control (Git), scripting (PowerShell/Bash/Python), and code review practices.
Experience implementing cloud security controls, including identity management and RBAC.
Excellent communication skills with the ability to explain technical concepts to varied audiences.
Strong architectural and systems design capability with an infrastructure-as-code mindset.
Ownership mindset with accountability for reliability, security, and performance outcomes.
Commitment to automation, documentation, and operational excellence.
Ability to balance technical rigor with delivery timelines in a fast-paced environment.
Collaborative team player who works effectively across engineering and business functions.

Nice To Haves

Experience working in validated or regulated environments (e.g. GxP, ISO, SOC 2).
Background in the Life Sciences, Pharmaceutical, or Healthcare sectors.
Familiarity with Microsoft Fabric and modern data platform architectures.
Knowledge of DevOps and GitOps workflows, including Azure DevOps or GitHub Actions.
Experience with cloud cost optimization strategies and governance frameworks.

Responsibilities

Design, deploy, and manage Azure cloud infrastructure using Terraform and Infrastructure as Code (IaC) best practices.
Provision and maintain Azure services including AKS, ADF, Microsoft Fabric, Managed SQL Instances, Virtual Machines, and Batch Accounts.
Build and maintain secure virtual networks, including firewalls, private endpoints, NSGs, and network segmentation.
Ensure infrastructure meets organizational security standards, including identity and access management via Azure AD / Entra ID and RBAC.
Configure and monitor logs and notifications to proactively identify issues and minimize downtime.
Monitor Azure end of support components and plan changes and updates to the infrastructure as needed.
Develop, test and maintain backup and disaster recovery plans for infrastructure.
Enforce security controls and conduct regular audits to maintain compliance with organizational and regulatory requirements.
Support validated and regulated environmental requirements (e.g. GxP, ISO, SOC 2) where applicable.
Monitor infrastructure health and respond to security incidents promptly and effectively.
Collaborate with software, data engineering, and platform teams to support application hosting and CI/CD pipelines.
Document architecture decisions, runbooks, and operational procedures to support team knowledge sharing.
Evaluate and adopt new Azure services and cloud-native tooling to improve platform reliability and efficiency.
Contribute to monitoring, logging, and observability improvements across the infrastructure estate.