cloud engineer

Enfint; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Job summary

Jobtailor in Warsaw seeks an experienced Cloud Architect to design and evolve our Azure-based cloud platform, aligning with security and governance requirements.

You will implement IaC with Bicep, optimize performance, and collaborate with IT security. You’ll document patterns and support onboarding of new workloads.

Qualifications

• Extensive hands-on Azure cloud design and support experience.
• Proficiency with IaC tools (Bicep, ARM) and CI/CD pipelines.
• Strong scripting skills in PowerShell, Python, or C#.
• Experience with monitoring and security controls in Azure.
• Hybrid/telemetry knowledge of Azure networking and landing zones.

Responsibilities

• Apply cloud and service-oriented architecture principles to help define, manage, and continuously improve the organization’s cloud architecture.
• Propose ideas and share best practices to optimize internal customers’ cloud environments in terms of performance, security, reliability, and cost.
• Debug, troubleshoot, modify, and unit-test custom solutions built on the organization’s cloud platforms.
• Create technical specifications, documentation and contribute to the development of technical procedures and user support guides.
• Develop, organize, and maintain cloud systems, working closely with IT Security to support cloud security, privacy, and compliance requirements.
• Contribute to the Bicep module repository and landing zone templates used by solution teams.
• Support the onboarding of new workloads to the Azure platform, including subscriptions, networking, identity, and policy configuration.
• Triage and resolve platform support requests from solution teams via ServiceNow.
• Document reusable cloud patterns and contribute to the CCoE knowledge base in Confluence.

Skills

Azure

PowerShell

Python

Git

Networking fundamentals

Tools

Bicep

ARM templates

Azure DevOps

KQL

Confluence/ServiceNow

Job description

• Apply cloud and service-oriented architecture principles to help define, manage, and continuously improve the organization’s cloud architecture.
• Propose ideas and share best practices to optimize internal customers’ cloud environments in terms of performance, security, reliability, and cost.
• Debug, troubleshoot, modify, and unit-test custom solutions built on the organization’s cloud platforms.
• Create technical specifications, documentation and contribute to the development of technical procedures and user support guides.
• Develop, organize, and maintain cloud systems, working closely with IT Security to support cloud security, privacy, and compliance requirements.
• Contribute to the Bicep module repository and landing zone templates used by solution teams.
• Support the onboarding of new workloads to the Azure platform, including subscriptions, networking, identity, and policy configuration.
• Triage and resolve platform support requests from solution teams via ServiceNow.
• Document reusable cloud patterns and contribute to the CCoE knowledge base in Confluence.

Requirements

• 1-100 years of work experience designing, executing and supporting Cloud solutions in Azure.
• Hands‑on experience with Microsoft Azure, particularly in the following areas: compute, networking, identity, or storage.
• Basic knowledge of Infrastructure as Code tools, such as Bicep, ARM templates with a willingness to learn Bicep if you have not worked with it before.
• Understanding of Git and CI/CD concepts (Azure DevOps or GitHub Actions).
• Understanding of RBAC and Entra ID fundamentals.
• Scripting experience in PowerShell, Python, or C#.
• Experience operating, supporting, or maintaining cloud workloads and services.
• Familiarity with DevOps or DevSecOps practices.
• Experience with Azure Monitor, Log Analytics, and basic log analysis using KQL.
• Experience building or supporting secure Azure network configurations, including private networking, private endpoints, custom routing, and Azure Private DNS.
• Good understanding of Azure networking components, such as Azure Firewall, Application Gateway, Load Balancer, Network Security Groups, virtual networks, and VNet peering.
• Nice-to-have skills and growth opportunities: Experience with Azure Landing Zones or Enterprise‑Scale architecture.
• Experience working in hybrid environments, combining on‑premises infrastructure with Microsoft Azure.
• Good understanding of Azure governance concepts, including management groups, built‑in and custom roles, and Azure RBAC.
• Familiarity with Azure monitoring concepts, including Data Collection Rules and Diagnostic Settings.
• Experience with hub‑and‑spoke networking models and Azure Virtual WAN.
• Experience troubleshooting network‑related issues using native Azure services, such as Network Watcher, or third‑party tools, such as Wireshark.
• Experience building automated solutions using Azure DevOps, Logic Apps, Automation Accounts, Azure Functions, and API integrations.
• Experience with cloud migration projects, including migrating applications from public to private Azure networking using private endpoints and Azure Private DNS.
• Familiarity with container technologies and platforms, such as AKS, Azure Red Hat OpenShift, Azure Container Apps, or Kubernetes in general.
• Knowledge of Azure Policy and its use in enforcing governance, compliance, and security standards.
• Azure certifications such as AZ-104, AZ-305, AZ-700, or SC-300.
• Exposure to AI‑related Azure services or concepts, such as Azure OpenAI, Azure AI Foundry, AI Landing Zones, or similar technologies.