Lead Cloud Engineer (Azure)

Jobgether · Remote, United States

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Lead Cloud Engineer (Azure) based in the United States.

We are seeking an experienced Lead Cloud Engineer to design, build, and maintain secure, scalable cloud infrastructure within an enterprise data environment. In this role, you will lead infrastructure automation, platform provisioning, and hybrid multi-cloud integration across Microsoft Azure and Google Cloud Platform. You will play a key role in implementing high-availability architectures, secure networking, identity management, and enterprise-grade data services. Working with modern technologies such as Terraform, Azure Kubernetes Service (AKS), Azure DevOps, and Microsoft Entra ID, you will help establish reliable and repeatable cloud engineering practices. You will also ensure that infrastructure meets stringent healthcare security, privacy, and regulatory requirements, including HIPAA and Protected Health Information (PHI) safeguards. This remote opportunity is ideal for a technically strong cloud engineer who enjoys solving complex infrastructure challenges and building secure, automation-driven platforms.
\Infrastructure as Code and Automation:

Design, develop, and maintain reusable Terraform modules and deployment pipelines to provision and manage Azure enterprise data infrastructure, including networking, security controls, resource groups, and service integrations.
Cloud Architecture and Environment Management:

Implement and maintain a three-plane architecture comprising the Control Plane, Data Plane, and Target Stores across designated Azure subscriptions and resource groups, supporting both high-assurance staging and production environments and lower-assurance development and testing environments.
Hybrid Multi-Cloud Connectivity:

Configure secure private networking between Azure and Google Cloud data services, enabling connectivity to BigQuery, Cloud Storage, FHIR Store, and DICOM Store through private endpoints without exposing sensitive workloads to the public internet.
Azure Platform Services:

Deploy, configure, and maintain Azure Kubernetes Service (AKS), Azure Database for PostgreSQL Flexible Server with pgvector, Blob Storage, Azure Key Vault, Azure Container Registry (ACR), and Azure Artifacts.
Support the deployment and operation of containerized workloads, including Apache Airflow, Milvus, Neo4j operators, and custom applications, with appropriate Kubernetes configurations and GPU-enabled node pools where required.
Implement Microsoft Entra ID authentication and role-based access control (RBAC), enforce least-privilege permissions, integrate SailPoint-governed groups, manage personal service accounts, and support just-in-time (JIT) privileged access.
Monitoring and Observability:

Configure centralized logging, monitoring, and telemetry using Azure Monitor, ensuring that operational logs and audit records are designed to exclude Protected Health Information (PHI).
Security and Regulatory Compliance:

Apply encryption, access controls, secure connectivity, data residency requirements, and secure software development lifecycle practices to protect sensitive healthcare data and maintain compliance.
Build and maintain automated infrastructure deployment pipelines using Azure DevOps and GitHub Enterprise, incorporating testing, validation, security checks, and repeatable release processes.
Platform Reliability and Continuous Improvement:

Identify and resolve infrastructure, networking, security, and deployment issues while improving cloud performance, reliability, scalability, and operational efficiency.
Partner with data engineers, platform teams, security specialists, and other technical stakeholders to establish cloud engineering standards, resolve complex technical challenges, and deliver dependable enterprise data capabilities.
Cloud Engineering Expertise:

Extensive hands-on experience with Microsoft Azure enterprise data platforms, including infrastructure design, provisioning, networking, security, and operational support.
Hybrid Multi-Cloud Architecture:

Demonstrated experience designing and implementing secure hybrid or multi-cloud environments, particularly integrations between Azure, Google Cloud Platform, and Microsoft Fabric.
Infrastructure as Code:

Deep proficiency in Terraform, including reusable module development, infrastructure lifecycle management, and enterprise-scale deployment practices. CI/CD and Automation:

Strong experience building and managing automated deployment pipelines using Azure DevOps and GitHub Enterprise, with an emphasis on repeatability, security, and operational consistency.
Proven experience deploying and operating workloads on Azure Kubernetes Service (AKS), including Apache Airflow, Milvus, Neo4j operators, and custom applications. Azure Platform Services:

Practical knowledge of Azure networking, storage, Key Vault, Azure Database for PostgreSQL Flexible Server, Azure Container Registry, Azure Artifacts, and enterprise resource management.
Identity and Access Management:

Strong understanding of Microsoft Entra ID, RBAC, least-privilege access, privileged identity management, service accounts, and enterprise identity governance solutions such as SailPoint.
Healthcare Security and Compliance:

Working knowledge of HIPAA requirements, PHI protection, data residency restrictions, encryption standards, and secure SDLC practices. Experience implementing centralized monitoring, logging, telemetry, and audit controls while ensuring sensitive information is excluded from logs and diagnostic outputs.
Strong analytical and troubleshooting skills, with the ability to resolve complex cloud infrastructure, connectivity, container orchestration, and security issues.
A proactive approach to automation, infrastructure optimization, security enhancement, and adopting cloud engineering best practices.
Comprehensive health insurance:

Health coverage designed to support employee well-being.
Retirement savings:

Paid holidays:

Company-provided paid holidays.
Support for employees welcoming a new child.
Time off to manage personal and family loss.
Employee referral bonuses:

Opportunities to earn bonuses for eligible referrals.
Remote work flexibility:

A remote position based in the United States.
Opportunities to work with Azure, Google Cloud, Kubernetes, Terraform, and modern enterprise data platforms.
The opportunity to strengthen expertise in cloud architecture, infrastructure automation, multi-cloud integration, and healthcare data security.
The chance to build secure, scalable cloud foundations that support sensitive data workloads and enterprise-level innovation.
\We use an

AI-powered matching process

to ensure your application is reviewed quickly, objectively, and fairly against the roles core requirements. Data Privacy Notice:

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR).