Cloud Engineer

Qualibar; Gainesville (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

Qualibar Inc. is seeking an Azure Cloud Engineer to design, implement, and operate cloud workloads in Microsoft Azure, focusing on secure, reliable, and well-architected solutions using Azure services such as Container Apps, App Service, VNet, VMs, storage, and serverless platforms.

The role collaborates with application, DevOps, and security teams to enhance cloud posture, conduct security assessments, and automate deployments with IaC, CI/CD, and robust monitoring.

Qualifications

• Experience designing and operating cloud workloads in Microsoft Azure.
• Strong understanding of security assessments and posture hardening.
• Experience with IaC, CI/CD pipelines, and monitoring tooling.

Responsibilities

• Design, implement, and operate cloud workloads in Azure.
• Build and maintain IaC with Bicep or Terraform; deploy via GitHub Actions or Azure DevOps.
• Containerize apps and manage Azure Container Registry.
• Collaborate with application, DevOps, and security teams to modernize workloads.
• Design Azure networking (VNets, NSGs, hubs/spokes) and private connectivity.
• Manage private endpoints, Private Link, and private DNS zones.

Skills

Azure

Infrastructure as Code

GitHub Actions

Networking

Security

Tools

Azure DevOps

Terraform

Bicep

Job description

The Azure Cloud Engineer is responsible for the design, implementation, configuration, monitoring, and ongoing support of cloud workloads running in Microsoft Azure. This role focuses on building secure, reliable, and well-architected solutions using modern Azure services including Azure Container Apps, App Service, Vnets, virtual machines, storage, and serverless platforms — and integrating them with on‑premises systems via private connectivity.

The Azure Cloud Engineer partners closely with application, DevOps, and security teams to deliver new cloud workloads, harden existing ones, conduct security assessments, and continuously improve the client’s cloud posture. This position reports directly to the Manager, Network & Security.

Responsibilities

• Implement workloads following Microsoft's Cloud Adoption Framework and Well-Architected Framework principles (reliability, security, cost, operational excellence, performance).
• Build and maintain infrastructure-as-code using Bicep or Terraform; manage deployments through GitHub Actions or Azure DevOps pipelines.
• Containerize applications, build images, and operate registries in Azure Container Registry.
• Partner with application and DevOps teams to onboard new workloads and modernize existing applications.
• Design and implement Azure networking components including Virtual Networks, subnets, Network Security Groups, route tables, and hub-and-spoke topologies.
• Implement and manage private endpoints, Private Link services, and private DNS zones to keep traffic off the public internet.
• Support hybrid connectivity through ExpressRoute and site-to-site VPN, integrating Azure environments with on‑premises VMware and Cisco infrastructure.
• Configure and troubleshoot Azure Front Door, Application Gateway, Web Application Firewall, and API Management as required by workload designs.

Identity, Access & Governance

• Administer Microsoft Entra ID, including users, groups, application registrations, service principals, and managed identities.
• Implement role-based access control (RBAC), Privileged Identity Management (PIM), and Conditional Access policies aligned with least-privilege principles.
• Maintain Azure Policy, management group hierarchy, and landing zone governance baselines.
• Apply consistent tagging, naming, and resource organization standards across subscriptions.

Security & Assessments

• Conduct and respond to cloud security assessments using Microsoft Defender for Cloud, Microsoft Secure Score, and third-party scanning tools.
• Remediate findings from vulnerability scans, penetration tests, and configuration reviews against agreed SLAs.
• Implement security baselines and hardening guidelines for Azure workloads, containers, and supporting services.
• Manage secrets, certificates, and keys in Azure Key Vault; rotate credentials and eliminate hard-coded secrets in pipelines.
• Review security alerts and logs, elevate suspicious activity, and partner with the security team on incident response for cloud-hosted resources.

Monitoring, Operations & Continuous Improvement

• Implement and maintain monitoring, logging, and alerting using Azure Monitor, Log Analytics, Application Insights, and Microsoft Sentinel.
• Build dashboards and runbooks for workload health, capacity, and cost.
• Track and optimize Azure consumption — right-sizing, reservations, and waste reduction.
• Participate in on-call rotation and assist in resolving Sev 1/2 incidents affecting cloud workloads.
• Document architectures, runbooks, and operational procedures.

Team & Project Support

• Partner with DevOps, application, and network engineers on infrastructure projects, migrations, and platform upgrades.
• Coordinate with Microsoft and third-party vendors for support cases, architecture reviews, and remediation activities.
• Research and evaluate emerging Azure services and recommend adoption where they fit the client’s roadmap.