Senior Cloud Operations Engineer

Pathstone•San Francisco, CA

4d•$120,000 - $140,000•Hybrid

About The Position

We are seeking an experienced Cloud Operations Engineer (Azure) to design, implement, and operate secure, scalable, and highly available cloud infrastructure within Microsoft Azure. This is a hands-on role focused on operational excellence—driving stability, performance, automation, cost optimization, security hardening, and resilient recovery strategies across a modern cloud platform. In this role, you will be responsible for maintaining and continuously improving cloud environments that support enterprise applications, ensuring alignment with security, compliance, and operational best practices. You will collaborate closely with engineering, security, and DevOps teams to ensure cloud services are deployed safely, monitored effectively, and enhanced continuously. The ideal candidate brings a strong combination of Azure administration, architectural awareness, and DevOps integration, with deep expertise in identity, security, and automation. You will play a key role in enabling rapid and reliable delivery through Azure DevOps and robust CI/CD pipelines while advancing the maturity and efficiency of the organization’s cloud operations.

Requirements

4–7+ years of experience in IT infrastructure, cloud administration, or systems engineering.
Extensive hands-on experience with Microsoft Azure (IaaS, PaaS, networking, identity).
Experience with Azure DevOps and CI/CD pipelines.
Strong knowledge of identity management (Entra ID / Okta integration).
Experience with scripting/automation (PowerShell, Python, or similar).
Solid understanding of networking concepts (DNS, TCP/IP, firewalls, VPNs).

Nice To Haves

Azure certifications (Administrator, Security Engineer, or DevOps Engineer).
Experience implementing Zero Trust architecture.
Familiarity with Infrastructure as Code.
Experience supporting regulated environments (financial services, healthcare, etc.).
Knowledge of monitoring and observability tools (Azure Monitor, LogicMonitor).
Bachelor’s degree in information technology related field.

Responsibilities

Administer and optimize Azure environments across IaaS and PaaS services, ensuring scalability, reliability, and performance.
Deploy and manage Azure services including computer, networking, storage, and platform services.
Monitor system health, availability, and performance using Azure-native and third party tools.
Provide support for production systems, including incident response and root cause analysis.
Maintain SLAs and ensure systems meet uptime and resiliency requirements.
Own operational lifecycle management for Azure app registrations, enterprise applications, service principals, client secrets, certificates, Key Vault integrations, and related monitoring/alerting to prevent expiration-related outages.
Support Azure networking resources including VNets, peering, private endpoints, private DNS zones, VPN connectivity, NSGs, routing, and firewall/security integration.
Deploy and operate Azure SQL Database / Azure SQL Managed Instance services, including secure connectivity, backups, performance monitoring, availability options, and recovery validation.
Create and maintain technical documentation, architecture diagrams, operational runbooks, and support handoff materials for Azure, identity, automation, and application platform services.
Collaborate with application teams to design cloud-native and cloud-optimized solutions.
Leverage Azure PaaS services such as: Azure App Service, Azure Functions, Azure Logic Apps, Azure API Management.
Ensure applications are designed for high availability, fault tolerance, and scalability.
Implement patterns such as microservices, event-driven architecture, and API-first integration.
Partner with development teams to implement and manage CI/CD pipelines using Azure DevOps and enforce DevOps best practices.
Support infrastructure provisioning.
Automate deployment, configuration, and scaling processes.
Ensure consistent environments across development, staging, and production.
Integrate and manage identity across Azure Entra ID and Okta.
Design and maintain SSO, MFA, and federation between platforms.
Implement role-based access control (RBAC) and least privilege principles.
Manage user access provisioning, deprovisioning, and periodic access reviews.
Support identity lifecycle governance and audit readiness.
Implement and maintain a security-first architecture, aligned with Zero Trust principles.
Enforce policies for endpoint, network, and cloud workload protection.
Utilize tools such as: Crowdstrike Falcon Platform, Netskope, Azure Policies, Conditional Access.
Support regulatory compliance initiatives (e.g., SEC, NIST-aligned controls).
Participate in security assessments, vulnerability management, and incident response.
Design and maintain highly available and fault-tolerant systems across regions and availability zones.
Implement backup, disaster recovery, and business continuity strategies.
Validate recovery objectives (RTO/RPO) through regular testing.
Ensure redundancy across critical systems and services.
Support the deployment and operationalization of AI solutions including Copilot technologies, Azure OpenAI, and other modern LLM options (e.g., Claude) where appropriate.
Implement secure-by-design AI patterns: access controls, data boundary protections, logging, monitoring, cost governance, and safe experimentation environments.
Monitor and optimize Azure spending through: Resource right-sizing, Reserved Instances and Savings Plans, Auto-scaling configurations, Ongoing audits of existing deployments.
Implement tagging and cost allocation strategies.
Provide regular reporting and recommendations to leadership.
Balance performance, reliability, and cost efficiency.
Integrate cloud services with enterprise platforms and third-party systems.
Support API-based integrations and hybrid connectivity.
Collaborate with vendors and internal teams to deliver secure and scalable solutions.