Cloud Engineer

The Phoenix Group®; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

The Phoenix Group is seeking a Cloud Engineer to own our Azure environment end to end. This hybrid architect/engineer role involves designing the target state of our cloud infrastructure and then building it, applying best practices for a well-governed, multi-region footprint.

You will work closely with the infra team to move from ad hoc deployments toward robust, repeatable patterns and strong security, identity, and governance controls across the Azure stack.

Qualifications

• Hands-on Azure engineering experience with production ownership.
• Strong background in Azure identity and access management (Azure AD / Entra ID).
• Production experience with Terraform for infrastructure as code.
• Experience designing or implementing Azure Landing Zones.
• Familiarity with Azure networking (ExpressRoute, VNets) and hybrid connectivity.
• Experience supporting multi-region cloud architecture.
• Comfortable acting as architect and hands-on engineer.
• Solid understanding of cloud governance and security frameworks.
• Azure certifications (AZ-104, AZ-305, AZ-500) are a plus.

Responsibilities

• Own the Azure environment end-to-end across compute, networking, identity, and governance.
• Design and build Azure Landing Zones for new workloads with repeatable patterns.
• Manage IAM in Azure/Entra ID including RBAC and conditional access.
• Deploy and manage infrastructure as code using Terraform.
• Plan expansion to a multi-region Azure architecture.
• Configure Azure ExpressRoute for private connectivity between on-prem and cloud.
• Apply naming conventions, tagging, and governance standards to the Azure footprint.
• Collaborate with infrastructure and security teams to implement the architectural vision.
• Document decisions, standards, and runbooks.

Skills

Azure engineering ownership

Azure IAM/Entra ID

Landing Zones design

Terraform deployment

Multi-region architecture

Azure networking (ExpressRoute, VNets)

Cloud governance & security

Well-Architected Framework

Azure certifications (AZ-104/AZ-305/AZ

Tools

Terraform

Azure

Job description

About The Role

We are looking for a Cloud Engineer to take ownership of our Azure environment end to end. This is a hybrid architect/engineer role: you will help design the target state of our cloud infrastructure and then build it yourself. You'll bring structure, consistency, and best practices to an environment that is actively growing, working closely with the infrastructure team to move from ad hoc deployments toward a well-governed, multi-region Azure footprint.

About The Role

We are looking for a Cloud Engineer to take ownership of our Azure environment end to end. This is a hybrid architect/engineer role: you will help design the target state of our cloud infrastructure and then build it yourself. You'll bring structure, consistency, and best practices to an environment that is actively growing, working closely with the infrastructure team to move from ad hoc deployments toward a well-governed, multi-region Azure footprint.

What You\'ll D

• oOwn the Azure environment holistically, spanning compute, networking, identity, and governanc
• eDesign and build Azure Landing Zones for new workloads and deployments, establishing repeatable, well-architected pattern
• sManage Identity and Access Management (IAM) in Azure/Entra ID, including role-based access, conditional access, and least-privilege desig
• nDeploy and manage infrastructure as code using Terrafor
• mPlan and execute expansion to a multi-region Azure architectur
• eStand up and configure Azure ExpressRoute to improve private connectivity between on-prem and cloud environment
• sBring structure, naming conventions, tagging, and governance standards to the existing Azure footprin
• tPartner with infrastructure and security stakeholders to translate architectural vision into implemented solution
• sApply Azure Well-Architected Framework best practices across reliability, security, cost, and operational excellenc
• eDocument architecture decisions, standards, and runbooks to support the broader infrastructure tea
  
  

m

What We\'re Looking F

What We're Looking F

• orHands-on Azure engineering experience, with real ownership of production environmen
• tsStrong background in Azure identity and access management (Azure AD / Entra I
• D)Production experience with Terraform for infrastructure as co
• deExperience designing or implementing Azure Landing Zon
• esFamiliarity with Azure networking, including ExpressRoute, VNets, and hybrid connectivity patter
• nsExperience supporting or planning multi-region cloud architectur
• esComfort operating as both architect and hands-on engineer, not just one or the oth
• erStrong understanding of cloud governance, security, and best-practice framewor
• ksExcellent communication skills and ability to work cross-functionally with infrastructure and security tea
• msMicrosoft Azure certifications (e.g., AZ-104, AZ-305, AZ-500) a pl
  
  

us