Senior Azure Cloud & Platform Engineer

Farmers and Merchants Bank of Long Beach•Seal Beach, CA

6d•Onsite

About The Position

The Senior Azure Cloud & Platform Engineer is responsible for designing, building, automating, and operating the Bank's Microsoft Azure cloud platform in support of its technology modernization strategy. This role plays a key part in establishing the Azure foundation, cloud engineering standards, automation frameworks, and operational practices that will enable scalable, secure, and resilient technology capabilities across the organization. The Senior Azure Cloud & Platform Engineer leverages deep expertise in Azure cloud services, Infrastructure as Code (IaC), Kubernetes, identity and access management, cybersecurity, automation, CI/CD pipelines, observability, and platform reliability engineering. Working closely with Infrastructure, Network Engineering, Information Security, Application Development, Enterprise Architecture, Risk Management, and Audit teams, this position helps design and deliver secure, compliant, and reusable cloud solutions that support the Bank's business objectives.

Requirements

Strong experience designing, implementing, and supporting production Microsoft Azure environments, including enterprise-scale Azure Landing Zones and cloud governance frameworks.
Demonstrated hands-on expertise with Terraform and Infrastructure as Code (IaC) principles, including the development and maintenance of reusable modules and automated deployment patterns.
Experience designing, deploying, and supporting containerized platforms utilizing Azure Kubernetes Service (AKS), Kubernetes, Docker, Azure Container Registry (ACR), and related container technologies.
Strong knowledge of Microsoft Entra ID, Azure Role-Based Access Control (RBAC), Managed Identities, Privileged Identity Management (PIM), Azure Policy, Key Vault, and Microsoft Defender for Cloud.
Experience implementing and supporting CI/CD pipelines using Azure DevOps, GitHub Actions, Git, or comparable source control and automation platforms.
Experience configuring and supporting enterprise monitoring, logging, and observability solutions utilizing Azure Monitor, Log Analytics, Application Insights, dashboards, and alerting tools.
Proficiency in automation and scripting using PowerShell, Azure CLI, Python, Bash, or similar technologies to support provisioning, configuration management, and operational efficiency.
Working knowledge of Azure networking services, including Virtual Networks (VNets), Subnets, Network Security Groups (NSGs), DNS, Private Endpoints, Load Balancers, Routing, ExpressRoute, VPN connectivity, and hybrid cloud architectures.
Strong understanding of cloud security principles and frameworks, including Zero Trust, identity and access management, encryption, secrets management, vulnerability management, compliance controls, high availability, business continuity, and disaster recovery.
Experience supporting regulated environments with an understanding of governance, risk management, audit requirements, and security best practices.
Ability to analyze complex technical issues, perform root cause analysis, and implement effective solutions in a fast-paced production environment.
Strong verbal and written communication skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders.
Proven ability to collaborate across Infrastructure, Information Security, Application Development, Network Engineering, Architecture, Risk, Compliance, and Audit teams.
Strong organizational, documentation, analytical, and problem-solving skills with a commitment to operational excellence and continuous improvement.
Ability to manage multiple priorities, lead initiatives independently, and deliver high-quality results with minimal supervision.
Commitment to maintaining technical expertise through continuous learning and staying current with emerging cloud technologies and industry best practices.
Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field preferred; or an equivalent combination of education, training, and relevant work experience.
Minimum of 7 years of experience in infrastructure engineering, platform engineering, DevOps, systems engineering, cloud engineering, or related technology disciplines.
Minimum of 4 years of significant hands-on experience with Microsoft Azure, including the design, implementation, automation, and support of enterprise cloud environments.
Experience working within a regulated industry, preferably banking, financial services, healthcare, insurance, or other environments with stringent compliance and security requirements.
Working knowledge of industry security and compliance frameworks, including NIST, CIS Controls, FFIEC, PCI DSS, SOC 2, SOX, or similar regulatory and governance standards.
Experience planning and executing migrations of VMware, virtualized infrastructure, and traditional data center workloads to Microsoft Azure.
Experience implementing and supporting Azure services such as Azure Backup, Azure Site Recovery, Microsoft Sentinel, Azure SQL, Azure Storage, Azure Networking, and other Azure Platform-as-a-Service (PaaS) offerings.
Understanding of FinOps principles, cloud financial management, cost optimization strategies, budgeting, forecasting, and resource utilization best practices.
Demonstrated ability to design, implement, and support universally available, secure, and scalable cloud platforms in enterprise environments.
Experience collaborating with Infrastructure, Security, Application Development, Architecture, Risk Management, Compliance, and Audit teams in support of cloud initiatives and operational excellence.

Nice To Haves

Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Azure Solutions Architect Expert
Microsoft Certified: Azure DevOps Engineer Expert
Microsoft Certified: Azure Security Engineer Associate
Certified Kubernetes Administrator (CKA)
Hashi Corp Terraform Associate
Microsoft Certified: Cybersecurity Architect Expert
Microsoft Certified: Azure Network Engineer Associate

Responsibilities

Design, build, implement, and support enterprise-class Microsoft Azure infrastructure and platform services that align with the Bank's strategic technology objectives.
Establish, maintain, and continuously enhance Azure Landing Zones, including management groups, subscriptions, resource organization, governance policies, identity integration, logging, security controls, and compliance standards.
Develop and maintain standardized, reusable cloud platform architectures and engineering patterns that enable secure, scalable, and efficient adoption of Azure services across the organization.
Engineer universally available, scalable, resilient, and secure cloud solutions, including backup, business continuity, and disaster recovery capabilities.
Support the modernization, transformation, and migration of approved on-premises applications, systems, and infrastructure workloads to Microsoft Azure.
Build, maintain, and optimize Infrastructure as Code (IaC) solutions using Terraform, Bicep, and Azure-native deployment technologies.
Develop reusable Terraform modules, CI/CD pipelines, and automated deployment frameworks utilizing Azure DevOps, GitHub Actions, and Git-based repositories.
Automate provisioning, configuration management, compliance validation, monitoring, and operational processes using PowerShell, Azure CLI, Python, Bash, or similar scripting languages.
Design, deploy, administer, and support Azure Kubernetes Service (AKS) environments, including cluster lifecycle management, scaling, security, observability, networking, and integration with Azure Container Registry.
Implement and administer Microsoft Entra ID, Azure RBAC, Privileged Identity Management (PIM), Managed Identities, Key Vault, Azure Policy, and Microsoft Defender for Cloud in accordance with least-privilege access and Zero Trust security principles.
Design and maintain enterprise monitoring and observability solutions utilizing Azure Monitor, Log Analytics, Application Insights, dashboards, metrics, and alerting frameworks.
Collaborate closely with Information Security, Risk Management, Compliance, Audit, Infrastructure, Network Engineering, and Application Development teams to embed security, governance, and regulatory controls into cloud solutions.
Participate in incident response, problem management, root cause analysis, production support activities, and continuous improvement initiatives to enhance platform reliability and performance.
Establish and maintain cloud governance standards, resource tagging strategies, cost management practices, budgeting visibility, and optimization initiatives to ensure efficient cloud consumption.
Develop and maintain technical documentation, operational runbooks, standards, procedures, and architecture diagrams related to Azure platform services.
Evaluate emerging Azure technologies, cloud engineering practices, and automation capabilities, providing recommendations that support the Bank's cloud strategy and operational maturity.
Serve as a subject matter expert and mentor to team members, promoting cloud engineering best practices, knowledge sharing, and continuous learning throughout the organization.
Participate in after-hours support, scheduled maintenance activities, and on-call rotations as required to ensure platform availability and operational stability.