Azure Cloud Platform Engineer - Infra & Java Delivery

Koitecc Solutions; Chicago, Northern (IL, KY); Hybrid; USD 100,000 - 169,000; Full time

Job summary

Northern Trust seeks an Azure Infrastructure Engineer to design, build, and operate secure, scalable cloud platforms while collaborating with Java teams. You will own Azure infrastructure, including networking, compute, and storage, and enable JVM/Spring Boot delivery on ACA, App Services, and serverless runtimes.

Responsibilities include creating landing zones, private networking, RBAC/Entra ID governance, CI/CD integration, and reliability through monitoring and autoscaling.

Qualifications

• 5+ years in cloud infrastructure or SRE with Azure (networking, compute, storage, identity, security).
• Hands-on with ACA (Azure Container Apps), App Services, Functions, Private Endpoints/Private Link, Key Vault, App Config, SQL Server.
• Strong Java ecosystem familiarity: JVM tuning, Spring Boot, packaging, containerization, and deployment to ACA/App Services; serverless batch patterns via Functions time triggers.
• IaC (Terraform/Bicep), GitHub Actions/Azure DevOps, and GitOps workflows.
• Security fundamentals: RBAC, Entra ID, MFA, secrets management, and compliance controls.

Responsibilities

• Design and implement Azure landing zones and subscriptions with RBAC, Entra ID integration, MFA, and compliant tagging/naming standards; automate guardrails using policy and role assignments.
• Build secure virtual networks, subnets, route tables, NSGs, and Private Endpoints/Private Link to isolate services and eliminate public exposure.
• Provision and manage compute/services: ACA, App Services, Functions, VMs, App Config, Key Vault, and SQL Server; define transition patterns for on-prem to Azure.
• Partner with Java teams to containerize services, tune JVM, and deploy to ACA/App Services; standardize CI/CD pipelines and rollouts (blue/green, canary).
• Implement serverless schedules for Java workloads using Functions time triggers to simplify batch job orchestration.
• Enforce secrets management with Key Vault, least-privilege access, and identity-based controls; integrate with enterprise RBAC/Entra ID groups.

Skills

Azure

ACA (Azure Container Apps)

App Services

Functions

Private Endpoints/Private Link

Key Vault

App Config

SQL Server

Java ecosystem

JVM tuning

Spring Boot

Containerization

Terraform

Bicep

GitHub Actions

Azure DevOps

GitOps

RBAC

Entra ID

MFA

Tools

Terraform

Bicep

GitHub Actions

Azure DevOps

Job description

Northern Trust seeks an Azure Infrastructure Engineer to design, build, and operate secure, scalable cloud platforms while collaborating with Java teams. You will own Azure infrastructure, including networking, compute, and storage, and enable JVM/Spring Boot delivery on ACA, App Services, and serverless runtimes.

Responsibilities include creating landing zones, private networking, RBAC/Entra ID governance, CI/CD integration, and reliability through monitoring and autoscaling.