Cloud Engineer

About the Role

We're looking for a Cloud Engineer to own and evolve our Microsoft Azure environment — from core infrastructure to the data and AI platforms built on top of it. You'll drive our shift from legacy VM-based infrastructure to modern, cloud-native architecture, using Infrastructure as Code (Bicep) and automation (PowerShell) as your default tools rather than manual work. Beyond infrastructure, you'll take ownership of our data platforms: SQL Server today, with Postgres on the horizon, plus Synapse and Azure AI Foundry. We're a global company operating under GDPR and other regional security standards, with team members across the US and Australia — so some flexibility in your working hours is expected to keep overlap with both regions, though this isn't a follow-the-sun on-call role.

What You'll Do

Own & Modernize the Platform

• Run day-to-day operations across Azure compute, storage, and platform services, and own governance, access controls, and cost/performance tuning.
• Lead migration of legacy VM-based workloads to cloud-native patterns (containers, managed services, serverless), and shape the broader cloud architecture roadmap.

Data & AI Platforms

• Administer SQL Server in production, with growing responsibility for Postgres as we adopt it.
• Support and optimize Synapse workloads and Azure AI Foundry deployments, partnering with data and ML teams on platform needs.

Automate & Deploy

• Build and maintain Infrastructure as Code in Bicep (Terraform experience a plus), with reusable modules for common patterns.
• Write PowerShell/Python automation to eliminate manual operational work, and improve CI/CD pipelines (Azure DevOps or equivalent) alongside software engineering teams.

Secure & Comply

• Design and maintain Azure networking (VNets, NSGs, firewalls, hybrid/private connectivity) and apply security hardening in partnership with the security team.
• Ensure infrastructure and data handling meet GDPR and other applicable regional security and regulatory standards; support audits and governance frameworks (Azure Policy, Defender for Cloud).

Monitor, Harden & Optimize

• Strengthen observability (Azure Monitor, Log Analytics, Application Insights) and build resilience through redundancy, auto-scaling, and tested backup/DR plans.
• Track cloud spend and drive cost-optimization (rightsizing, reserved capacity) without compromising reliability.

What You Bring

• Solid, hands-on experience running production Azure infrastructure — compute, storage, and networking — at a senior level.
• Strong Infrastructure as Code skills, ideally with Bicep, plus scripting fluency in PowerShell (Python a plus).
• Experience administering SQL Server in production; openness to picking up Postgres.
• Some exposure to Synapse, Azure AI Foundry, or comparable data/AI platforms — or a clear ability to ramp up quickly.
• Working knowledge of network security and compliance frameworks, including GDPR.
• Comfort collaborating across a distributed US/AU team, with flexibility to shift working hours for overlap when needed.

Nice to Have

• Azure certifications (AZ-104, AZ-305, AZ-700).
• Experience with containers (Docker, AKS) or multi-cloud environments (AWS, GCP).
• Background in SRE practices or large-scale Azure migrations.