About the job:
- Infrastructure-as-Code (IaC) Delivery: Design, author, and maintain reusable Terraform modules and deployment pipelines for the Azure Enterprise Data environment, including core networking, security controls, resource groups, and service integrations
- Three-Plane Architecture Setup: Implement and manage the three-plane architecture (Control Plane, Data Plane, and Target Stores) across designated Azure subscriptions and resource groups supporting high-assurance (stage/prod) and low-assurance (dev/test) environments
- Hybrid Multi-Cloud Networking & Security: Configure secure private networking and connectivity between Azure and the Google Cloud Advanced Data Lake (ADL)—reaching BigQuery, Cloud Storage, FHIR Store, and DICOM Store via private endpoints without public internet exposure
- Platform Services & Storage Provisioning: Deploy and configure Azure services including Azure Kubernetes Service (AKS), Azure Database for PostgreSQL flexible server (with pgvector), Blob Storage, Key Vault, Azure Container Registry (ACR), and Azure Artifacts
- Identity & Access Management (IAM): Integrate Entra ID sign-in enforcing role-based access control (RBAC), least-privilege permissions, and SailPoint-governed groups, alongside personal service accounts and JIT elevation for privileged access
- Observability & Compliance: Configure centralized logging and monitoring via Azure Monitor, ensuring all telemetry and audit logs are strictly configured to exclude Protected Health Information (PHI)
About you:
- Cloud Platforms: Expert-level experience with Microsoft Azure enterprise data platforms, hybrid multi-cloud architectures, and integration points with Google Cloud and Microsoft Fabric
- Containerization & Orchestration: Proven experience deploying and operating Apache Airflow, Milvus, Neo4j operators, and custom workloads on Azure Kubernetes Service (AKS), including GPU node pool configuration
- Automation & Tooling: Deep proficiency in Infrastructure-as-Code (Terraform, Spacelift/Terraform Enterprise) and CI/CD pipeline implementation via Azure DevOps and GitHub Enterprise
- Healthcare Compliance & Security: Strong working knowledge of HIPAA/PHI compliance controls, data residency restrictions (US-based storage/processing), encryption standards (TLS 1.2+, at-rest key management), and secure SDLC practices
Skills Required
- Expert-level experience with Microsoft Azure enterprise data platforms
- Experience with hybrid multi-cloud architectures integrating Azure, Google Cloud, and Microsoft Fabric
- Proven experience deploying and operating Apache Airflow, Milvus, Neo4j operators, and custom workloads on Azure Kubernetes Service
- Experience configuring GPU node pools on Azure Kubernetes Service
- Deep proficiency with Terraform and Spacelift or Terraform Enterprise
- Experience implementing CI/CD pipelines with Azure DevOps and GitHub Enterprise
- Strong knowledge of HIPAA and PHI compliance controls
- Knowledge of US data residency restrictions, encryption standards including TLS 1.2+, at-rest key management, and secure SDLC practices
What We Do
Egen is a data engineering and cloud modernization firm partnering with leading Chicagoland companies to launch, scale, and modernize industry-changing technologies. We are catalysts for change who create digital breakthroughs at warp speed. Our team of cloud and data engineering experts are trusted by top clients in pursuit of the extraordinary. Our mission is to be an enabler of amazing possibilities for companies looking to use the power of cloud and data. We want to stand shoulder to shoulder with clients, as true technology partners, and make sure they succeed at what they have set out to do. We want to be disruptors, game-changers, and innovators who have played an important part in moving the world forward.







