Cloud Engineer

EXOS; Indianapolis (IN); On-site; USD 90,000 - 130,000; Full time

Job summary

EXOS is seeking a highly skilled Cloud Engineer to design, implement, and maintain secure Azure infrastructure across client environments in the United States. You will manage compute, storage, networking, and identity components (Entra ID) to ensure scalable, compliant, and cost-efficient cloud solutions.

The role requires 3–5+ years of hands-on Azure experience, strong networking knowledge, and proficiency in monitoring, security, and disaster recovery practices. On-call rotation may apply.

Qualifications

• 3–5+ years of hands-on cloud engineering experience.
• Proven experience designing and managing Azure IaaS/PaaS and Entra ID.
• Strong understanding of Azure VNets, subnets, VPNs and VNet peering.
• Solid knowledge of Microsoft Entra ID and Azure RBAC interactions.

Responsibilities

• Design, deploy, and manage Azure compute resources (VMs, VMSS, Availability Sets) and storage to support scalable, reliable environments.
• Architect and manage Azure VNets, subnets, NSGs, VPN Gateways, ExpressRoute connections.
• Implement RBAC policies to enforce least privilege across subscriptions and resources.
• Configure backup and Site Recovery for business continuity.
• Monitor, alert, and log using Azure Monitor & Log Analytics.

Skills

Compute & Storage

Virtual Networking

RBAC

Backup & DR

Entra ID

Hybrid Identity

Cloud Security

Monitoring & Logging

Cost Management

Incident Response

Azure Monitor

Azure Log Analytics

Networking basics

Education

Bachelor's degree in IT/CS

Job description

We are seeking a highly skilled and experienced Cloud Engineer to manage, optimize, and secure our Microsoft Azure cloud environments. You will play a key role in designing, implementing, and maintaining reliable, scalable, and secure Azure infrastructure to support multiple client cloud environments.

No C2C or 3rd Party Vendors

• Compute & Storage Management: Design, deploy, and manage Azure compute resources (Virtual Machines, VM Scale Sets, Availability Sets) and storage solutions (Blob Storage, File Storage, Managed Disks) to support scalable, highly available environments.
• Virtual Networking: Architect and manage Azure Virtual Networks (VNets), including subnets, VNet peering, Network Security Groups (NSGs), VPN Gateways, and ExpressRoute connections.
• Role-Based Access Control (RBAC): Design and implement RBAC policies to enforce least-privilege access across subscriptions, resource groups, and individual resources.
• Backup & Disaster Recovery: Configure and maintain Azure Backup and Azure Site Recovery to protect workloads, ensure data durability, and support business continuity planning.

Identity & Access Management

• Entra ID Administration: Manage Microsoft Entra ID (Azure AD), including users, groups, enterprise applications, and conditional access policies, and understand how Entra ID interacts with Azure RBAC and resource access.
• Hybrid Identity: Support hybrid identity scenarios, including Entra Connect synchronization between on-premises Active Directory and Microsoft Entra ID where applicable.

Security, Monitoring, and Cost Optimization

• Cloud Security: Implement and manage robust security policies, including Identity and Access Management (Microsoft Entra ID, RBAC), network security (VNet, Network Security Groups/NSGs), encryption, and compliance controls across the Azure environment.
• Monitoring and Logging: Configure and manage comprehensive monitoring, alerting, and logging solutions using platform-native tools (e.g., Azure Monitor and Azure Log Analytics) to ensure continuous operational health.
• Cost Management: Continuously monitor and analyze cloud spending, recommending and implementing optimization strategies (e.g., resource right-sizing, reserved instances, storage tiering) to ensure cost-efficiency.
• Incident Response: Participate in a 24/7 on-call rotation to respond to, troubleshoot, and resolve critical incidents in a timely manner.

Required Qualifications:

• Experience: 3-5+ years of hands-on experience as a Cloud Engineer or similar role.
• Education: Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field (or equivalent practical experience).
• Azure Expertise: Proven experience designing and managing core IaaS and PaaS Azure services, as well as Microsoft Entra ID.
• Networking: Solid understanding of Azure virtual networking concepts (VNets, subnets, NSGs, VPN Gateway and VPNs, VNet Peering, load balancing, etc.).
• Identity & Access Management: Solid understanding of Microsoft Entra ID and how it interacts with Azure RBAC and resource access management.

Preferred Qualifications:

• Certifications: Active Azure certifications such as Azure Administrator Associate (AZ-104) or Identity and Access Administrator Associate (SC-300).
• NOTE: Azure Fundamentals (AZ-900) will be a minimum requirement for this position. If it is not currently held or active, it must be obtained within 3 months of the employment start date.
• Operating Systems: Proficient in administering Windows operating systems, and basic understanding/experience with common Linux systems.
• Database: Experience with Azure SQL Database and/or other PaaS database services in Azure.