Azure Cloud Engineer

Sono Bello; Bellevue (WA); On-site; USD 130,000 - 163,000; Full time

Benefits offered by this job

Health coverage

401(k)

Paid time off

Parental leave

Equity

Job summary

Join a leading cosmetic surgery specialist as an Azure Cloud Engineer in Bellevue, WA. You will design and manage Azure cloud infrastructure, ensuring security and scalability. This role offers a dynamic work environment and opportunities for professional growth.

Qualifications

• 3+ years of hands-on experience in Azure engineering or similar roles.
• Experience building Azure services with ARM templates and Azure AD.

Responsibilities

• Designs and maintains Azure virtual networks for secure communication.
• Implements security measures including Azure Firewalls and DDoS Protection.
• Develops automation scripts for Azure deployments.

Skills

Azure Networking

Security and Network Management

Identity and Access Management

Compute

Storage Management

Automation and Scripting

Monitoring

Database Services

Documentation and Best Practices

Education

Bachelor’s degree in information technology

Tools

PowerShell

Microsoft 365

Azure Active Directory

Job description

Sono Bello is America's top cosmetic surgery specialist, with 185+ board-certified surgeons who have performed over 300,000 laser lipo and body contouring procedures. A career at Sono Bello means being part of a dynamic and high-energy work environment where every team member can make a difference. We love what we do, and it shows! We believe everyone deserves to have their best body today and pursue their best life now.

This position is based on-site in the Greater Seattle Area.

Join our dynamic and innovative team at Sono Bello, where we are committed to leveraging innovative cloud-first technologies to drive our business forward. As an Azure Cloud Engineer, you will play a pivotal role in designing, implementing, and supporting our Azure cloud infrastructure, ensuring our systems are secure, scalable, and highly available. We are looking for a passionate and experienced professional who thrives in a collaborative environment and is eager to contribute to our mission of delivering exceptional cloud solutions.

Essential Duties And Responsibilities

1. Azure Networking: Designs, implements, configures, and maintains all virtual networks, ensuring secure and efficient communication between Azure resources and local offices.
2. Security and Network Management: Implements Private Link, Peering Services, DDoS Protection, Azure Firewalls, Network Security Groups, Web Application Firewall, Application Gateways, Load Balancers, Bastions, Azure Route Tables, Front Door, CDN, and Network Watcher.
3. Identity and Access Management: Manages Entra ID (Azure AD), Privileged Identity Management, and enforces role-based access control to secure user identities and resources following a least privileged model.
4. Compute: Deploys, configures, and manages Azure Virtual Machines to ensure optimal performance and security. Manages Availability Sets, Scale Sets, App Services, Azure Backup, and Azure Update Manager.
5. Storage Management: Configures and oversees Azure storage solutions, ensuring data availability, durability, and cost-efficiency. Manages Storage Accounts, Snapshots, Disks, and Recovery Services Vaults.
6. Automation and Scripting: Develops and supports automation and templates to streamline Azure deployments and administrative tasks using Azure Automation Accounts, Azure Policy, Azure Resource Manager, and PowerShell.
7. Monitoring: Utilizes Log Analytics Workspace for logging and Azure Monitor for system health and performance monitoring.
8. Database Services: Provides best practice configurations for Azure database services, ensuring data integrity, security, and performance. Documents repeatable configurations and maintains knowledge base articles.
9. Documentation and Best Practices: Creates technical documentation for other teams and advocates for following security best practices like the Least Privilege model and change management processes.

Education, Experience, and Skills Required

1. A bachelor’s degree in information technology, computer science, a related field, or equivalent work experience.
2. Proven hands-on experience (3+ years) in Azure engineering or similar roles with the listed products.
3. Experience building Azure services with ARM, ARM templates, ARM policy, and Azure Active Directory (Entra).
4. Knowledge of Microsoft best practices, security, encryption, PKI, modern authentication, and protocols such as SAML or OAuth.
5. Experience working with Microsoft 365 products like Exchange, SharePoint, Teams, and Azure.
6. Proficiency with PowerShell scripting within a Microsoft 365 tenant environment.

Preferred Qualifications

1. Comfort working in a newly forming security team of three roles.
2. Certifications such as Microsoft Certified: Azure Network Engineer Associate, Azure Identity and Access Administrator Associate, or Azure Solutions Architect Expert are a plus.

Work Environment

Work onsite at the Corporate Office in Bellevue, WA for a minimum of 3 days a week, with potential remote work on Wednesdays and Fridays.

Compensation Range: $130,000 USD - $163,000 USD. Actual pay depends on qualifications, experience, skills, and business needs. Benefits include incentives, equity, health coverage, 401(k), paid time off, and parental leave.