Principal Cloud Infrastructure Engineer – Azure
Job Description:
- Own Azure architecture across all environments (prod, staging, dev).
- Build, review & improve existing Terraform IaC.
- Design and implement secure cloud landing zones (networking, IAM, governance).
- Design and drive infrastructure patterns for environment separation, multi-tenant, single-tenant, and regional deployments.
- Continuously work on improvement of Identity & Access Management (RBAC, PIM, Conditional Access).
- Drive improvement of existing backup and disaster recovery capabilities (RTO/RPO), including testing and ensuring full environment rebuild from IaC.
- Design and enforce network architecture (segmentation, private endpoints, firewall/WAF).
- Lead infrastructure-related incident response, root cause analysis, and production support.
- Improve logging, monitoring, and alerting architecture.
- Implement security controls in infrastructure aligned with SOC 2 and ISO 27001 requirements.
- Provide technical direction and quality control for remote Platform/DevOps engineers.
- Document current architecture, identify gaps, and drive improvements.
- Optimize cloud cost, performance, and reliability.
- Establish runbooks and operational processes. Requirements:
- 7+ years in cloud infrastructure, SRE, or cloud security roles, with experience operating production systems.
- 4+ years deep, hands-on Azure experience in production SaaS environments.
- Experience operating at Staff-level scope, shaping infrastructure decisions and standards.
- Strong Terraform/Bicep experience at production scale (module design, environment structure, governance).
- Proven experience designing cloud architecture, not just implementing existing designs.
- Experience owning production systems, including uptime, reliability, and incident response.
- Experience designing and executing disaster recovery strategies (RTO/RPO, restore procedures).
- Strong hands-on experience across Azure core platform components (App Services, networking, managed databases, IAM, storage, monitoring, and logging).
- Deep experience with Entra ID / Azure AD (RBAC, PIM, Conditional Access).
- Strong understanding of cloud networking and security (segmentation, private endpoints, firewall/WAF, zero trust).
- Experience designing or evolving infrastructure for multi-tenant SaaS platforms.
- Experience designing or contributing to regional or multi-region architectures, including data residency considerations.
- Experience in working with distributed or offshore engineering teams.
- Strong written and verbal communication skills in English.
- Legally authorized to work in the United States on a permanent basis without need for current or future employer-sponsored immigration support. Benefits:
- Flexible vacation
- Remote work options
- Opportunity to determine your own growth path Apply To this Job