Cloud Engineer

The Azure Cloud Engineers are responsible for the implementation, maintenance, and optimization of Kuvare’s Cloud Infrastructure within Microsoft Azure. They work within established frameworks to create reliable, scalable, and efficient infrastructure, ensuring that deployments align with the company’s technical standards. This role serves as a key technical contributor, collaborating with senior cloud engineers and software teams to support cloud adoption and operational excellence. 

• Cloud Infrastructure Implementation:  Provision, manage, and optimize Azure cloud resources while adhering to architecture best practices and established standards for security and cost efficiency.  Ensure all work aligns with the defined platform goals.
• Infrastructure as Code (IaC):  Develop and update Infrastructure as Code (IaC) templates, especially Bicep and also some ARM, to automate the management of networking components, storage, and security features, as well as app services such as web apps and function apps.  Follow established standards for code versioning, testing and modularization.
• CI/CD Pipelines:  Support and maintain CI/CD pipelines using Azure DevOps or Github Actions.  Automate the deployment of infrastructure changes and applications to Azure cloud environments, ensuring consistent and secure releases.
• Site Reliability Engineering Concepts:  Maintain reliable cloud systems with a focus on high availability and fault tolerance.  Utilize monitoring and observability solutions to proactively detect and resolve issues and to assist in root-cause analysis for incident resolution.
• Support practices around SLIs and SLOs to ensure that SLAs are met. Execute Disaster Recovery (DR) tasks according to defined RTOs and RPOs. 
• Observability:  Configure and maintain monitoring / alerting tooling such as Azure Monitor and Azure Log Analytics.  Use telemetry data to provide visibility into system health.
• Security and Compliance:  Implement Azure solutions that comply with industry standards and Kuvare’s security policy.  Assist in managing security features such as Entra, RBAC, PIM, NSGs, and Azure Firewall.  Remediate vulnerabilities as identified by audit reports.
• Containers:  Experience with Kubernetes is a plus, with experience working within established containerization patterns. 

• Documentation and Knowledge Sharing: Maintain accurate technical documentation, including configuration records, diagrams, and standard operating procedures (SOPs) 

  Experience

1. Minimum 5 years of relevant professional experience.  Microsoft Azure is required.
2. Broad cloud engineering experience, not just building virtual machines but also delivering “app services” such as web apps, function apps, etc.
3. Experience in a large Azure footprint is helpful - multiple tenants and subscriptions, complex network design, integration between cloud and on-prem platforms.
4. Experience creating Infrastructure as Code (IaC) templates in Bicep.  ARM and Terraform are related languages, and experience there is a bonus but not an acceptable substitute.
5. Experience creating Continuous Integration/Continuous Deployment (CI/CD) pipelines in Azure DevOps, or else GitHub Actions, to automate the deployment of code to the cloud.
6. Experience implementing monitoring & alerting tools such as Azure Monitor, Azure Log Analytics and /or have experience with similar tools such as Grafana, Prometheus, Loki, or ELK.
7. Experience managing security features such as Entra, RBAC, PIM, PAM, NSG, and Azure Firewall.