We are seeking a highly skilled Senior Cloud Engineer with deep hands-on expertise in Microsoft Azure to design, build, automate, and operate enterprise-scale cloud infrastructure, based in Wilmington, DE. This is an execution-focused, hands-on role requiring strong technical ownership across end-to-end cloud platforms - with an emphasis on Infrastructure as Code (IaC), automation, network security, and operational excellence.

You will engineer secure, scalable, and automated solutions across Azure (Cloud) environments, driving efficiency, repeatability, and governance at scale, while partnering closely with security, networking, and platform teams.
This is a highly hands-on role. Candidates must demonstrate real-world experience in building, automating, and operating enterprise cloud environments at scale.

What You'll Do...

Cloud Engineering & Architecture
• Design, implement, and operate highly scalable, secure Azure infrastructure across IaaS, PaaS, AKS, networking, and identity.
• Build end-to-end cloud environments from the ground up using automation-first principles.
• Architect resilient solutions including HA/DR, multi-region, availability zones, and failover designs.

Infrastructure as Code (Terraform First)
• Develop, maintain, and optimize Terraform modules, pipelines, and reusable frameworks for all Azure deployments.
• Ensure all infrastructure is code-driven, version-controlled, and standardized across environments.
• Enforce a strict "no manual deployment" policy.

Automation & Operational Efficiency
• Build deep automation across infrastructure provisioning, configuration management, deployment pipelines, and environment scaling.
• Develop advanced automation using PowerShell, Python, Bash, and Azure CLI.
• Continuously eliminate manual effort and accelerate deployment speed and operational efficiency.
• Optimize CI/CD pipelines to support fully automated build → deploy → security → compliance workflows.

Networking & Security (Advanced)
• Design and implement enterprise-grade Azure network architectures: Hub-Spoke, VNet peering, Private Endpoints, VPN, and ExpressRoute.
• Integrate and manage firewalls - rule design, segmentation, threat prevention, and traffic inspection.
• Enforce zero-trust and least-privilege access models.
• Implement and maintain NSGs, Azure Firewall, Application Gateway, and WAF.
• Ensure compliance with enterprise security policies and frameworks.

DevOps & Platform Engineering
• Design and maintain CI/CD pipelines using Azure DevOps and GitHub.
• Build fully automated infrastructure and application deployment pipelines.
• Integrate security scanning, secrets management, and artifact pipelines (ACR-based patterns).
• Enable platform engineering capabilities for developer self-service.

Containerization & Modern Platforms
• Design, deploy, and manage AKS-based platforms.
• Build and support container workflows (Docker, Kubernetes) and secure image pipelines (ACR).
• Optimize cluster performance, scaling, and networking.

Performance, Cost & Reliability Optimization
• Continuously monitor and optimize performance, availability, and cost (FinOps practices).
• Implement observability stack: Azure Monitor, Log Analytics, alerts, and dashboards.
• Drive cost governance and efficiency improvements.

Migration & Integration
• Lead complex cloud migration initiatives - lift-and-shift, re-platform, and refactor.
• Integrate cloud environments with on-prem systems and the enterprise network/security stack.
• Build repeatable migration frameworks and runbooks.

Security & Governance
• Implement Azure security best practices across identity (AAD, RBAC, PIM), data protection (encryption, Key Vault), and threat detection (Defender, Sentinel).
• Drive policy-based governance using Azure Policy and management groups.
• Maintain strict compliance and audit readiness.

Documentation & Standards
• Create and maintain architecture diagrams, IaC standards, runbooks, and SOPs.
• Define and enforce cloud engineering standards across teams.

What You Bring

Education
• Bachelor's degree in Computer Science, IT, or a related field.

Experience
• 8+ years of IT infrastructure / cloud engineering experience.
• Demonstrated hands-on Azure engineering experience and capabilities.
• Strong background in enterprise cloud platform engineering.

Technical Skills
• Cloud & Platforms - Advanced Azure (Compute, Storage, Networking, Identity, Security); strong AKS/container experience
• Infrastructure as Code - Expert-level Terraform (mandatory); ARM / Bicep (optional)
• Automation - Strong scripting in PowerShell, Python, Bash; large-scale automation patterns
• DevOps - CI/CD (Azure DevOps, GitHub), Git-based workflows, release automation
• Networking Hub-Spoke, VPN, ExpressRoute, DNS/Routing/NAT; Palo Alto firewall integration (must-have)
• Security Cloud security architecture, IAM, compliance & governance frameworks

Preferred Certifications
• Azure Solutions Architect Expert (AZ-305)
• Azure Network Engineer (AZ-700)
• Azure Security Engineer (AZ-500)
• Azure DevOps Engineer (AZ-400)
• HashiCorp Terraform Associate (highly preferred)

Other Skills
• Strong ownership mindset with end-to-end delivery accountability.
• Excellent troubleshooting and problem-solving skills.
• Thrives in fast-paced enterprise environments.
• Strong communication with both technical and business stakeholders.

#LI-LH1

#-LI-Hybrid