Cloud Infrastructure Engineer

Princeton University; Princeton (NJ); Hybrid; USD 135,000 - 150,000; Full time

Job summary

Princeton University seeks an experienced Infrastructure Engineer to own provisioning, configuration, security, and maintenance of infrastructure for integration platforms—on-prem Linux now expanding into Azure cloud with AKS. Hybrid role with ongoing on-call and DR planning.

You will manage IAM, network, and security, collaborate on CI/CD pipelines, and support data and API workloads across teams. Bachelor's in CS or related field required; salary range reflected in posting.

Qualifications

• Experience with Azure cloud infrastructure (compute, networking, storage, identity, security).
• Proficient in Kubernetes and containerization (Docker, AKS).
• Experience with Infrastructure-as-Code (Bicep, Terraform, or ARM).
• Strong Linux/Unix system administration and scripting skills.
• Proficient in Python programming for automation.
• Solid understanding of networking (DNS, HTTP/S, TCP/IP, load balancing).
• Experience building CI/CD pipelines and deployment automation.
• Ability to design, implement, and enforce security controls in pipelines.
• Hands-on IAM experience (AD, LDAP, SSO).
• Experience with monitoring/observability tools (Prometheus, Grafana).

Responsibilities

• Architect, design and develop infrastructure supporting integration and data platforms.
• Build and manage Azure cloud infrastructure using AKS and other services.
• Harden on-premises Linux environments and manage patching and security.
• Administrate IAM integrations and certificate lifecycle management.
• Oversee network configuration for integration workloads.
• Collaborate on CI/CD infrastructure and deployment tooling.
• Provide production support including on-call rotations and incident escalation.
• Implement monitoring, logging, and alerting for all services.
• Lead disaster recovery planning and environment restoration.

Skills

Azure cloud infrastructure

Kubernetes

Infrastructure-as-Code

Linux / shell scripting

Python programming

Networking fundamentals

CI/CD tooling

Security hardening

IAM integrations

REST APIs

Education

Bachelor's degree in computer science or related field

Tools

AKS

Terraform

Bicep

Terraform / ARM templates

Job description

Overview

The Princeton DMIA Integration team is seeking an experienced Infrastructure Engineer to be the backbone of our Integration Services team. This role owns the provisioning, configuration, security, and ongoing maintenance of all infrastructure that supports our integration platforms — spanning API integrations, data pipelines, and the shared services that underpin them. You will work across our current on-premises Linux environment and be instrumental in building out the cloud infrastructure as we modernize our platform stack.

This position is a hybrid role.

Responsibilities

Architect, Design and Develop

• Provision, configure, and maintain all infrastructure supporting integration, and data and platforms including WSO2, and related middleware on on-premises Linux servers.
• Design and build Azure cloud infrastructure hosting platform using AKS (Azure Kubernetes Service), and other Azure services for the organization’s next-generation API, data, and applications, following infrastructure-as-code (IaC) principles.
• Manage and harden on-premises server environments including OS patching, package management, service configuration, and security hardening on Linux.
• Administer IAM integrations including LDAP directory services, Active Directory, service account management, and certificate lifecycle management.
• Own network configuration relevant to integration workloads: DNS, firewall rules, load balancers, VPNs, and API gateway networking.

Collaborate and Coordinate

• Collaborate on CI/CD pipeline infrastructure, including build agents, artifact repositories, and deployment automation tooling.
• Support API and data engineering teams with environment provisioning, capacity planning, and performance tuning of integration runtimes.

Production Support

• Participate in on-call production support rotation and serve as escalation point for infrastructure-layer incidents.
• Implement and maintain monitoring, alerting, and logging infrastructure (log aggregation, metrics dashboards, uptime monitoring) for all integration services.
• Lead disaster recovery planning, backup procedures, and environment restoration for integration platform components.

Qualifications

• • Azure cloud infrastructure — compute, networking, storage, identity, security
  • Kubernetes and containerization — Docker, AKS or equivalent managed Kubernetes
  • Infrastructure-as-Code — Bicep, Terraform, or ARM; Bicep preferred
  • Linux / shell scripting
  • Python programming
  • SQL — sufficient for operational queries and platform tooling
  • Networking — DNS, HTTP/S, TCP/IP, load balancing, proxies, firewalls
  • IAM — Active Directory, LDAP, OAuth 2.0, SAML, certificate management
• 7+ years provisioning and managing cloud infrastructure on Azure, including network and security configuration
• Demonstrated experience building or scaling a shared platform that hosts applications for multiple teams — including tenant isolation, resource governance, and self‑service or templated onboarding
• Experience establishing CI/CD pipelines for automated deployment of containerized workloads, using Azure DevOps, Jenkins, GitHub Actions, or equivalent
• Experience embedding automated security controls into deployment pipelines — container image and vulnerability scanning, policy enforcement, compliance gating
• Linux/Unix systems administration with RHEL/CentOS/Ubuntu — systemd, package management, performance tuning
• Advanced shell and Python scripting for automation, monitoring, and operational tasks
• Hands‑on IAM experience — Active Directory, LDAP, certificate management, and SSO integration
• Solid networking fundamentals — TCP/IP, DNS, HTTP/S, load balancing, firewall and proxy configuration
• Working knowledge of REST APIs for infrastructure automation and tool integration
• Experience with infrastructure monitoring and observability tooling — Prometheus, Grafana, ELK, Azure Monitor, or equivalent
• Ability to set technical direction and mentor engineers, including documenting standards and transferring knowledge to colleagues newer to modern cloud practice
• Ability to work directly with application teams to translate hosting requirements into platform capabilities, and to communicate technical constraints to non-technical stakeholders
• Education: Bachelor's degree in computer science, information technology, engineering, or a related field; or equivalent professional work experience

PREFERRED

• Experience with GitOps deployment practices — ArgoCD, Flux — and Helm chart authoring
• Experience administering WSO2 platform infrastructure (API Manager, Micro Integrator, streaming components)
• Azure-native security tooling — Azure Policy, Defender for Cloud, private endpoints, network security groups
• Secrets management — HashiCorp Vault, Azure Key Vault
• Configuration management — Ansible, or equivalent
• Familiarity with cloud-native data platform infrastructure — Snowflake, Databricks, Microsoft Fabric, or equivalent
• Higher education environment experience, particularly federated identity — Shibboleth, SAML‑based SSO
• Cloud platform certifications — Azure Administrator, Azure Solutions Architect, CKA, or equivalent
• Exposure to FinOps practices and cloud cost optimization
• Experience designing infrastructure documented and standardized for eventual operational handoff

Princeton University is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability status, protected veteran status, or any other characteristic protected by law.

The University considers factors such as (but not limited to) scope and responsibilities of the position, candidate's qualifications, work experience, education/training, key skills, market, collective bargaining agreements as applicable, and organizational considerations when extending an offer. The posted salary range represents the University's good faith and reasonable estimate for a full‑time position; salaries for part‑time positions are pro‑rated accordingly.

If the salary range on the posted position shows an hourly rate, this is the baseline; the actual hourly rate may be higher, depending on the position and factors listed above.

The University also offers a comprehensive benefit program to eligible employees. Please see this link for more information.

Standard Weekly Hours

36.25

Eligible for Overtime

No

Benefits Eligible

Yes

Probationary Period

180 days

Essential Services Personnel (see policy for detail)

No

Physical Capacity Exam Required

No

Valid Driver’s License Required

No

Experience Level

Director#LI-JJ1

Salary Range

$135,000 to $150,000