Senior Cloud Engineer

Lumexa Imaging•Raleigh, NC

About The Position

Lumexa Imaging is seeking an experienced Senior Cloud Engineer with deep expertise in public cloud Infrastructure‑as‑a‑Service (IaaS) across AWS and Microsoft Azure. The role requires strong skills in cloud networking, identity, automation, and platform engineering. The ideal candidate will excel in designing, deploying, and optimizing scalable cloud environments, with a strong emphasis on virtual network architecture (AWS VPC / Azure VNet), inter‑network connectivity, cloud routing, private service endpoints (AWS PrivateLink / Azure Private Endpoints), DNS (Route 53 / Azure DNS), and hybrid network integrations using VPN and dedicated circuits (AWS Direct Connect / Azure ExpressRoute). This role requires hands‑on experience implementing secure, high‑performance solutions using core cloud services such as compute (EC2 / Azure VMs), identity (IAM / Azure AD), serverless (Lambda / Azure Functions), API management (API Gateway / Azure API Management), monitoring (CloudWatch / Azure Monitor), logging (CloudTrail / Azure Activity Logs), object storage (S3 / Azure Blob), relational databases (RDS / Azure SQL), and load balancing (ELB/ALB/NLB / Azure Load Balancer & Application Gateway). The engineer will leverage cloud‑native networking and security controls—including security groups / NSGs, NACLs / Azure Firewall rules, AWS Network Firewall / Azure Firewall, WAF (AWS/Azure), and DDoS protection (AWS Shield / Azure DDoS Protection)—to build resilient, well‑architected systems aligned with best practices. The Senior Cloud Engineer will play a key role in modernizing our infrastructure, improving network resiliency, and driving automation through services like CloudFormation / Azure Resource Manager (ARM), Terraform, Systems Manager / Azure Automation, and AWS Config / Azure Policy.

Requirements

Bachelor’s degree in computer science, Engineering, Information Systems, or a related technical field.
Minimum of 6 years of hands‑on experience in cloud engineering or similar roles, with strong experience in AWS and Microsoft Azure.
Deep expertise with core cloud services including EC2 / Azure VMs, S3 / Azure Blob, VPC / VNet, IAM / Azure AD, Lambda / Azure Functions, CloudWatch / Azure Monitor, CloudTrail / Azure Activity Logs, RDS / Azure SQL, Route 53 / Azure DNS, ELB/ALB/NLB / Azure Load Balancer & Application Gateway, and Auto Scaling / Azure VM Scale Sets.
Strong proficiency in cloud networking concepts such as VPC/VNet design, subnetting, routing, Transit Gateway / Virtual WAN, PrivateLink / Private Endpoints, Direct Connect / ExpressRoute, VPN, NACLs / NSGs, security groups, and load balancing strategies.
Experience with additional cloud services commonly used in enterprise environments, such as CloudFront / Azure Front Door, SQS/SNS / Azure Service Bus & Event Grid, KMS / Azure Key Vault, EFS/EBS / Azure Files & Managed Disks, SSM / Azure Automation, AWS Config / Azure Policy, and AWS Backup / Azure Backup.
Familiarity with cloud security services including AWS WAF / Azure WAF, Shield / Azure DDoS Protection, Network Firewall / Azure Firewall, GuardDuty / Azure Defender, and Security Hub / Azure Security Center.
Proficiency with Infrastructure‑as‑Code tools such as Terraform, AWS CloudFormation, Azure ARM/Bicep, or similar automation frameworks.
Experience building and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, GitHub Actions, AWS CodePipeline / Azure DevOps Pipelines.
Strong understanding of cloud networking, security principles, identity management, and troubleshooting methodologies across AWS and Azure.
Experience with containerization and orchestration technologies such as Docker, ECS, AKS, and Kubernetes/EKS.
Hands‑on experience with monitoring, logging, and observability tools such as CloudWatch / Azure Monitor, ELK/OpenSearch, Datadog, Prometheus, or Grafana.
Familiarity with Linux system administration, shell scripting, and operational tooling.
Experience with both AWS and Azure is strongly preferred.

Nice To Haves

AWS and Azure certifications (Solutions Architect, SysOps, DevOps Engineer, or Advanced Networking) are highly desirable.

Responsibilities

Design, implement, and manage multi‑cloud infrastructure (AWS and Azure) with a focus on high availability, scalability, performance, and security.
Architect and maintain cloud networking solutions including AWS VPCs / Azure VNets, subnets, routing, load balancing, Transit Gateway / Azure Virtual WAN, PrivateLink / Azure Private Endpoints, and hybrid connectivity using VPN, Direct Connect, and ExpressRoute.
Collaborate closely with development, security, and operations teams to deploy and support cloud‑based applications, services, and platforms across AWS and Azure.
Automate provisioning, configuration, and operational workflows using AWS CloudFormation, Azure ARM/Bicep, Terraform, Ansible, and other infrastructure‑as‑code tools.
Monitor system health, analyze performance metrics, and conduct capacity planning using CloudWatch / Azure Monitor, ensuring reliable and efficient cloud operations.
Implement and enforce cloud security best practices, including IAM / Azure AD RBAC governance, network segmentation, encryption, and compliance with frameworks such as HIPAA and Sarbanes‑Oxley.
Troubleshoot complex cloud infrastructure and networking issues across AWS and Azure, performing root cause analysis and driving long‑term remediation.
Continuously evaluate emerging cloud services, tools, and architectural patterns across AWS and Azure to improve reliability, security, and operational efficiency.
Provide technical leadership, mentorship, and guidance to junior engineers and cross‑functional team members.
Create and maintain detailed documentation for architecture, operational processes, standards, and troubleshooting procedures.