Principal Cloud Infrastructure Engineer – Azure

Work from home Full-time role Hiring

Job Description:

Own Azure architecture across all environments (prod, staging, dev).
Build, review & improve existing Terraform IaC.
Design and implement secure cloud landing zones (networking, IAM, governance).
Design and drive infrastructure patterns for environment separation, multi-tenant, single-tenant, and regional deployments.
Continuously work on improvement of Identity & Access Management (RBAC, PIM, Conditional Access).
Drive improvement of existing backup and disaster recovery capabilities (RTO/RPO), including testing and ensuring full environment rebuild from IaC.
Design and enforce network architecture (segmentation, private endpoints, firewall/WAF).
Lead infrastructure-related incident response, root cause analysis, and production support.
Improve logging, monitoring, and alerting architecture.
Implement security controls in infrastructure aligned with SOC 2 and ISO 27001 requirements.
Provide technical direction and quality control for remote Platform/DevOps engineers.
Document current architecture, identify gaps, and drive improvements.
Optimize cloud cost, performance, and reliability.
Establish runbooks and operational processes.

Requirements:

7+ years in cloud infrastructure, SRE, or cloud security roles, with experience operating production systems.
4+ years deep, hands-on Azure experience in production SaaS environments.
Experience operating at Staff-level scope, shaping infrastructure decisions and standards.
Strong Terraform/Bicep experience at production scale (module design, environment structure, governance).
Proven experience designing cloud architecture, not just implementing existing designs.
Experience owning production systems, including uptime, reliability, and incident response.
Experience designing and executing disaster recovery strategies (RTO/RPO, restore procedures).
Strong hands-on experience across Azure core platform components (App Services, networking, managed databases, IAM, storage, monitoring, and logging).
Deep experience with Entra ID / Azure AD (RBAC, PIM, Conditional Access).
Strong understanding of cloud networking and security (segmentation, private endpoints, firewall/WAF, zero trust).
Experience designing or evolving infrastructure for multi-tenant SaaS platforms.
Experience designing or contributing to regional or multi-region architectures, including data residency considerations.
Experience in working with distributed or offshore engineering teams.
Strong written and verbal communication skills in English.
Legally authorized to work in the United States on a permanent basis without need for current or future employer-sponsored immigration support.

Benefits:

More open positions