Cloud Engineer

The Phoenix Group; New York (NY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

The Phoenix Group is seeking a Cloud Engineer to own our Azure environment end to end. This hybrid architect/engineer role focuses on designing the target state of our cloud infrastructure and then building it, with collaboration from the infrastructure team to move toward a well-governed, multi-region footprint.

You will design Landing Zones, manage IAM with Entra ID, and deploy infrastructure as code using Terraform, while applying Well-Architected Framework principles across reliability,

Qualifications

• Hands-on Azure engineering with production ownership.
• Strong background in Azure identity and access management (Azure AD / Entra ID).
• Production experience with Terraform for infrastructure as code.
• Familiarity with Azure networking including ExpressRoute, VNets, and hybrid connectivity patterns.
• Experience planning multi-region cloud architectures.
• Comfort operating as both architect and hands-on engineer.

Responsibilities

• Own the Azure environment end to end, including compute, networking, IAM, and governance.
• Design and build Azure Landing Zones for new workloads and deployments.
• Manage Identity and Access Management (IAM) in Azure/Entra ID, including RBAC and conditional access.
• Deploy and manage infrastructure as code using Terraform.
• Plan and execute expansion to a multi-region Azure architecture.
• Stand up and configure Azure ExpressRoute for private connectivity.
• Apply naming conventions, tagging, and governance standards to the Azure footprint.
• Collaborate with infrastructure and security teams to translate architectural vision into implemented solutions.

Skills

Azure engineering

Terraform

IAM / Entra ID

Azure ExpressRoute

Azure networking

Multi-region architecture

Governance & security

Communication

Cloud governance

Tools

Terraform

Azure ExpressRoute

Landing Zones

Azure AD / Entra ID

Job description

We are looking for a Cloud Engineer to take ownership of our Azure environment end to end. This is a hybrid architect/engineer role: you will help design the target state of our cloud infrastructure and then build it yourself. You'll bring structure, consistency, and best practices to an environment that is actively growing, working closely with the infrastructure team to move from ad hoc deployments toward a well-governed, multi-region Azure footprint.

What You'll D

• oOwn the Azure environment holistically, spanning compute, networking, identity, and governanc
• eDesign and build Azure Landing Zones for new workloads and deployments, establishing repeatable, well-architected pattern
• sManage Identity and Access Management (IAM) in Azure/Entra ID, including role-based access, conditional access, and least-privilege desig
• nDeploy and manage infrastructure as code using Terrafor
• mPlan and execute expansion to a multi-region Azure architectur
• eStand up and configure Azure ExpressRoute to improve private connectivity between on-prem and cloud environment
• sBring structure, naming conventions, tagging, and governance standards to the existing Azure footprin
• tPartner with infrastructure and security stakeholders to translate architectural vision into implemented solution
• sApply Azure Well-Architected Framework best practices across reliability, security, cost, and operational excellenc
• eDocument architecture decisions, standards, and runbooks to support the broader infrastructure tea

mWhat We're Looking F

• orHands-on Azure engineering experience, with real ownership of production environmen
• tsStrong background in Azure identity and access management (Azure AD / Entra I
• D)Production experience with Terraform for infrastructure as co
• esFamiliarity with Azure networking, including ExpressRoute, VNets, and hybrid connectivity patter
• nsExperience supporting or planning multi-region cloud architectur
• esComfort operating as both architect and hands-on engineer, not just one or the oth
• erStrong understanding of cloud governance, security, and best-practice framewor
• ksExcellent communication skills and ability to work cross-functionally with infrastructure and security tea
• msMicrosoft Azure certifications (e.g., AZ-104, AZ-305, AZ-500) a pl