Senior Cloud Infrastructure Engineer - Azure

Visa Hunt; Argentina; Presencial; ARS 3.000.000 - 5.400.000; Jornada completa

Descripción de la vacante

OZ Digital LLC is seeking a Senior Cloud Infrastructure Engineer - Azure to shape secure cloud infrastructure patterns in a high-impact consulting environment. You will define and strengthen architectural foundations supporting complex client environments, emphasizing security, resilience, and maintainability.

Responsibilities include maintaining Azure Landing Zones, leading Terraform PR reviews, implementing zero-trust networking, eliminating static secrets, and collaborating with CTO and Geo

Formación

• Expert-level Terraform with advanced state management and modular design.
• Strong experience in Azure security controls and RBAC.
• Familiarity with zero-trust networking and secret management.

Responsabilidades

• Maintain and scale hardened Azure Landing Zones with clear control/data plane separation.
• Lead Terraform PR reviews and ensure code quality.
• Implement zero-trust perimeter and remove public exposure.
• Eliminate static secrets via identity-driven authentication.
• Collaborate with CTO and Geo Practice Lead on secure infrastructure blueprints.

Conocimientos

Infrastructure decoupling

Agile methodologies

Herramientas

Terraform

Azure Entra ID

Azure Key Vault

OIDC

GitHub Actions

Private Link

Private Endpoints

Private DNS Zone

Databricks

Azure RBAC

Descripción del empleo

OZ Digital LLC is a technology consulting firm focused on helping clients improve operations and decision-making through intelligent automation, data analytics, AI, and related digital solutions. Working across the Information Technology and Services space, the company partners with organizations that need secure, scalable digital foundations to support modern platforms and business outcomes.

This role is an opportunity to shape secure cloud infrastructure patterns in a high-impact consulting environment. As a Senior Cloud Infrastructure Engineer - Azure, you will help define and strengthen the architectural foundations that support complex client environments, partnering closely with technical leadership and contributing to infrastructure decisions that emphasize security, resilience, and long-term maintainability.

Responsibilities

• Maintain, refactor, and scale hardened Azure Landing Zones ensuring explicit logical segregation between control planes and data planes.
• Govern infrastructure code quality by owning and leading comprehensive Terraform Pull Request (PR) reviews.
• Implement zero-trust network perimeter controls, completely removing public service exposure.
• Eliminate the use of static secrets and keys by establishing identity-driven authentication layers across all environments.
• Collaborate with core technical stakeholders, including the CTO and Geo Practice Lead, to deliver secure infrastructure blueprints.

Qualifications & Skill Set

• Expert-level mastery of infrastructure decoupling strategies (separating data processing workloads from management states).
• Strong operational discipline in agile environments: active participation in sprint execution, backlog hygiene, and structured technical documentation.

Specific Tools & Technologies

• Infrastructure as Code: Advanced Terraform exclusively (expertise in state management, state recovery, complex nesting, and reusable enterprise module design).
• Identity & Cryptography: Microsoft Entra ID, Azure Key Vault (strictly leveraging Azure RBAC authorization models), OpenID Connect (OIDC) federated credentials.
• Networking & Boundaries: Azure Private Link, Private Endpoints, Split-Horizon Private DNS Zone linking, and backend subnet isolation routing.
• CI/CD Orchestration: Secure GitHub Actions workflow engineering utilizing passwordless authentication identities.
• Workloads: Private network infrastructure hosting for analytical data environments (such as network-isolated Azure Databricks configurations) and secure model ingestion layers.

Certifications

• Required: Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Required: HashiCorp Certified: Terraform Associate or Advanced
• Preferred: Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate certification (SC-500)

Preferred Skills

• Familiarity with financial or insurance sector compliance frameworks and MEC reference architecture patterns.
• Practical alignment with cloud economics and fundamental infrastructure sizing optimizations.

Originally posted on Himalayas