Azure Platform Engineering Leader — Self‑Service Cloud

Crescent Energy

Houston (TX)

On-site

USD 180,000 - 240,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Crescent Energy is seeking an experienced Manager, Cloud Platform Engineering to lead Crescent's Azure platform and the self‑service experience for internal developers. You will own strategy, roadmap, and daily operations of the cloud foundation, partnering with security, network, data, and OT teams.

The role demands hands‑on leadership, architectural depth in Azure, Terraform, and Entra ID, and a track record of building platform‑as‑a‑product capabilities with strong governance, reliability,

Qualifications

Bachelor's degree or equivalent practical experience.
10+ years in cloud/platform/infrastructure engineering with deep Azure experience.
Proven track record leading engineering teams (4+ years).
Hands-on design, operation, and security of enterprise Azure infra and shared services.
Terraform IaC: module design, state, versioning, deployment workflows.
Microsoft Entra ID engineering: RBAC, conditional access, hybrid identity.
Experience building self-service/platform-as-a-product capabilities.
Solid Azure governance: management groups, landing zones, policy, tagging.
Security by default: least privilege, secrets management, policy-as-code.
Reliability practices: SLOs, incident response, postmortems.
FinOps: cost tagging, budgeting, forecasting, showback.

Responsibilities

Lead Crescent’s Cloud Platform Engineering function for Azure, IaC, identity, governance, reliability, and cost.
Mentor engineers and maintain a hands-on technical presence.
Set platform strategy and roadmap; treat the internal developer platform as a product.
Build self-service capabilities, reusable Terraform modules, templates, and guardrails.
Own design, deployment, operation of enterprise-scale Azure infrastructure and shared services.
Lead Terraform IaC practices: module design, state, versioning, CI/CD workflows.
Direct Entra ID engineering: identity lifecycle, RBAC, privileged access, hybrid identity.
Establish Azure governance with management groups, landing zones, policies, and tagging.
Embed security by default; policy-as-code, secrets management, logging, and control enforcement.
Standardize CI/CD pipelines and automation for platform infrastructure.
Establish reliability practices: SLOs, observability, incident response, postmortems.
Mature observability with Azure Monitor, dashboards, metrics, logs.
Lead FinOps for cloud spend with budgeting, tagging, rightsizing, and reporting.
Define platform standards, runbooks, and documentation; review incidents and RCA.