Lead Cloud Engineer, Azure

This is a fully remote position, open to applicants in United States.

📋 Description

• Create, write, and sustain reusable Terraform modules and deployment pipelines for the Azure Enterprise Data ecosystem, encompassing essential networking, security measures, resource groups, and service integrations.

• Execute and oversee a three-plane architecture across specified Azure subscriptions and resource groups for both high-assurance stage/prod and low-assurance dev/test environments.

• Establish secure private networking and connectivity between Azure and Google Cloud Advanced Data Lake, which includes BigQuery, Cloud Storage, FHIR Store, and DICOM Store, eliminating public internet exposure.

• Implement and set up Azure Kubernetes Service, Azure Database for PostgreSQL flexible server with pgvector, Blob Storage, Key Vault, Azure Container Registry, and Azure Artifacts.

• Connect Entra ID sign-in with RBAC, least-privilege permissions, SailPoint-governed groups, personal service accounts, and JIT elevation for privileged access.

• Set up centralized logging and monitoring via Azure Monitor while ensuring that Protected Health Information is excluded from telemetry and audit logs.

• Collaborate with engineering talent and advanced technology platforms to assist clients in driving action and impact through data and insights.

⛳️ Requirements

• Expert-level experience with Microsoft Azure enterprise data platforms, hybrid multi-cloud architectures, and integration points with Google Cloud and Microsoft Fabric.

• Demonstrated experience in deploying and managing Apache Airflow, Milvus, Neo4j operators, and custom workloads on Azure Kubernetes Service (AKS), including GPU node pool configurations.

• Extensive proficiency in Infrastructure-as-Code, particularly with Terraform and Spacelift/Terraform Enterprise.

• Implementation of CI/CD pipelines through Azure DevOps and GitHub Enterprise.

• Strong working knowledge of HIPAA/PHI compliance controls.

• Understanding of data residency requirements mandating US-based storage and processing.

• Familiarity with encryption standards, including TLS 1.2+ and at-rest key management.

• Knowledge of secure SDLC practices.

• Subject to standard hiring verification practices, which may include background checks and employment verification.

🏝️ Benefits

• Comprehensive Health Insurance.

• Paid Leave (Vacation/PTO).

• Paid Holidays.

• Sick Leave.

• Parental Leave.

• Bereavement Leave.

• 401(k) Employer Match.

• Employee Referral Bonuses.

• Reasonable accommodations during all aspects of the selection process.