Senior Azure Cloud and Network Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and manage Azure infrastructure encompassing compute, networking, storage, and identity, utilizing Terraform or Bicep as the authoritative source.

• Take full ownership of Azure infrastructure throughout its entire lifecycle following implementation.

• Act as the primary technical point of contact for Soleo Health regarding Azure, including the landing zone and Entra ID integration.

• Plan, manage, and resolve issues related to Azure networking and hybrid connectivity between Azure, corporate locations, hosted environments, and partners.

• Create and sustain CI/CD pipelines using Azure DevOps or GitHub Actions along with reusable Infrastructure as Code (IaC) modules.

• Implement automated drift remediation and compliance verification processes.

• Spearhead reliability engineering efforts, covering SLOs, observability, incident response, root-cause analysis, and postmortems.

• Direct the resolution of complex incidents involving internal teams and external vendors.

• Manage cloud cost governance, including rightsizing, reservations, tagging, forecasting, and anomaly detection.

• Collaborate with IT management and finance to clarify cost variances and assess architectural tradeoffs.

• Work with the security team to enhance security measures and ensure compliance with HIPAA/HITRUST/SOC 2 standards.

• Be responsible for designing and routinely testing backup, disaster recovery, and business continuity plans.

• Assess new Azure services and architectural patterns.

• Provide technical guidance to managed service providers and other vendors, ensuring adherence to contractual service levels.

• Mentor engineers, evaluate designs and pull requests, and communicate infrastructure risks, tradeoffs, and recommendations to both technical and executive stakeholders.

⛳️ Requirements

• Over 8 years of progressive experience in cloud infrastructure, network engineering, platform, DevOps, or SRE, with at least 5 years of hands-on experience with Microsoft Azure.

• Demonstrated ownership of a production Azure environment throughout its complete lifecycle, including design, implementation, administration, security, reliability, and cost management.

• In-depth knowledge of core Azure services: VNets, App Gateway, Load Balancer, Private Link, Storage, VMs, Firewall, VPN Gateway, ExpressRoute, DNS, SQL, Entra ID, and Key Vault.

• Advanced understanding of networking principles: TCP/IP, DNS, TLS, routing, firewalls, segmentation, zero trust, and hybrid-cloud connectivity.

• Experience with infrastructure-as-code in production (Terraform and/or Bicep), focusing on module design, state management, and drift remediation.

• Proficiency in scripting and automation using PowerShell, Python, and Azure CLI.

• Proven experience in on-call ownership, leading complex incidents, and coordinating across teams and service providers.

• Familiarity with cost management/FinOps, disaster recovery/business continuity design and testing, and managing MSPs or infrastructure vendors.

• Excellent remote communication skills across different time zones, including the ability to present risks and tradeoffs to senior leadership, and work independently with minimal specialized support.

• Availability to work Monday through Friday, 8 am to 5 pm, remotely from the USA.

🏝️ Benefits

• Competitive wages.

• 401(k) with company match.

• Referral bonuses.

• Paid time off.

• Positive company culture.

• Annual merit-based salary increases.

• Options for paid parental leave.

• Affordable medical, dental, and vision insurance plans.

• Company-paid disability and basic life insurance.

• HSA and FSA options (including dependent care).

• Education assistance program.