Lead Cloud Engineer (Azure)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Lead Cloud Engineer (Azure) based in the United States.

We are seeking an experienced Lead Cloud Engineer to design, build, and maintain secure, scalable cloud infrastructure within an enterprise data environment. In this role, you will lead infrastructure automation, platform provisioning, and hybrid multi-cloud integration across Microsoft Azure and Google Cloud Platform. You will play a key role in implementing high-availability architectures, secure networking, identity management, and enterprise-grade data services. Working with modern technologies such as Terraform, Azure Kubernetes Service (AKS), Azure DevOps, and Microsoft Entra ID, you will help establish reliable and repeatable cloud engineering practices. You will also ensure that infrastructure meets stringent healthcare security, privacy, and regulatory requirements, including HIPAA and Protected Health Information (PHI) safeguards. This remote opportunity is ideal for a technically strong cloud engineer who enjoys solving complex infrastructure challenges and building secure, automation-driven platforms.

Accountabilities

• Infrastructure as Code and Automation: Design, develop, and maintain reusable Terraform modules and deployment pipelines to provision and manage Azure enterprise data infrastructure, including networking, security controls, resource groups, and service integrations.
• Cloud Architecture and Environment Management: Implement and maintain a three-plane architecture comprising the Control Plane, Data Plane, and Target Stores across designated Azure subscriptions and resource groups, supporting both high-assurance staging and production environments and lower-assurance development and testing environments.
• Hybrid Multi-Cloud Connectivity: Configure secure private networking between Azure and Google Cloud data services, enabling connectivity to BigQuery, Cloud Storage, FHIR Store, and DICOM Store through private endpoints without exposing sensitive workloads to the public internet.
• Azure Platform Services: Deploy, configure, and maintain Azure Kubernetes Service (AKS), Azure Database for PostgreSQL Flexible Server with pgvector, Blob Storage, Azure Key Vault, Azure Container Registry (ACR), and Azure Artifacts.
• Containerization and Workload Orchestration: Support the deployment and operation of containerized workloads, including Apache Airflow, Milvus, Neo4j operators, and custom applications, with appropriate Kubernetes configurations and GPU-enabled node pools where required.
• Identity and Access Management: Implement Microsoft Entra ID authentication and role-based access control (RBAC), enforce least-privilege permissions, integrate SailPoint-governed groups, manage personal service accounts, and support just-in-time (JIT) privileged access.
• Monitoring and Observability: Configure centralized logging, monitoring, and telemetry using Azure Monitor, ensuring that operational logs and audit records are designed to exclude Protected Health Information (PHI).
• Security and Regulatory Compliance: Apply encryption, access controls, secure connectivity, data residency requirements, and secure software development lifecycle practices to protect sensitive healthcare data and maintain compliance.
• CI/CD and Delivery Engineering: Build and maintain automated infrastructure deployment pipelines using Azure DevOps and GitHub Enterprise, incorporating testing, validation, security checks, and repeatable release processes.
• Platform Reliability and Continuous Improvement: Identify and resolve infrastructure, networking, security, and deployment issues while improving cloud performance, reliability, scalability, and operational efficiency.
• Cross-Functional Collaboration: Partner with data engineers, platform teams, security specialists, and other technical stakeholders to establish cloud engineering standards, resolve complex technical challenges, and deliver dependable enterprise data capabilities.

Requirements

• Cloud Engineering Expertise: Extensive hands-on experience with Microsoft Azure enterprise data platforms, including infrastructure design, provisioning, networking, security, and operational support.
• Hybrid Multi-Cloud Architecture: Demonstrated experience designing and implementing secure hybrid or multi-cloud environments, par…