Senior Cloud Engineer

2021 Kinetic IT

9h•Hybrid

About The Position

Kinetic IT is seeking an experienced Senior Cloud Engineer to join us on a permanent full-time basis working within a highly regulated customer environment. This role will play a key part in expanding and operating the client’s Azure cloud footprint, supporting both project delivery and business-as-usual (BAU) platform operations. You will be responsible for designing, building, and supporting secure Azure Landing Zones and platform capabilities that enable internal application teams to operate effectively. Projects are managed by Kinetic IT, with a strong focus on repeatable Infrastructure as Code, secure networking, and operational excellence.

Requirements

Managing Azure Landing Zones, Infrastructure as Code deployments, Azure DevOps pipelines, secure networking, private endpoints, RBAC, monitoring, and platform integration services.
Work closely with application, integration, security, and infrastructure teams to deliver secure, reliable, and repeatable cloud services using modern DevOps and IaC practices.
Strong hands-on experience delivering and supporting Azure IaaS and PaaS services within enterprise or secure government environments.
Proven Infrastructure as Code capability using Bicep / ARM (with Terraform or similar desirable), including modular, reusable, and governed deployments.
Experience building and maintaining Azure DevOps YAML CI/CD pipelines for infrastructure delivery, validation, approvals, and controlled releases.
Solid understanding of Azure Landing Zones, governance frameworks, management groups, subscriptions, Azure Policy, and RBAC aligned to the Microsoft Cloud Adoption Framework.
Strong Azure networking, security, and identity expertise, including Private Endpoints, Private DNS, Azure Firewall, NSGs, routing, Entra ID, managed identities, and Key Vault.
Exposure to data platforms, integrations, or PaaS services (e.g. Databricks, Function Apps, APIs, Log Analytics, Power Platform) with strong troubleshooting skills using Azure Monitor and KQL.

Responsibilities

Design, manage, and support secure Azure platforms for a regulated government environment, including subscriptions, management groups, landing zones, networking, identity, security, monitoring, and shared platform services.
Build and maintain modular, governed Infrastructure as Code using Bicep / ARM (Terraform desirable), integrated with Azure DevOps YAML CI/CD pipelines to support validation, approvals, environment promotion, and controlled releases.
Support and extend enterprise-scale Azure Landing Zones aligned with the Microsoft Cloud Adoption Framework, including Azure Policy, RBAC, diagnostics, monitoring, naming standards, and secure subscription onboarding.
Design and support hub-and-spoke networking, VNets, NSGs, UDRs, Azure Firewall, Private Endpoints, Private DNS Zones, and secure inbound/outbound connectivity patterns.
Work with application and integration teams to deploy and support Azure PaaS services (Function Apps, APIs, Storage, Databricks, Log Analytics), while implementing secure access using Entra ID, RBAC, managed identities, Key Vault, and least-privilege principles.
Provide BAU support, incident resolution, and troubleshooting using Azure Monitor, Log Analytics, diagnostic logs, and KQL, while maintaining documentation, runbooks, and operational standards.