Cloud Solutions Engineer – Azure

Bright Vision Technologies; Eden Prairie (MN); Remote; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is seeking a skilled Azure Cloud Engineer to design, deploy, and operate large-scale, secure cloud platforms on Microsoft Azure. You will own the end-to-end cloud engineering lifecycle, including architecture, infrastructure-as-code, automation, security hardening, and operations for production workloads.

The role emphasizes collaboration with development, security, and SRE teams to deliver scalable, reliable, and compliant solutions, leveraging Terraform, AKS, Azure

Qualifications

• Bachelor's degree or higher in CS/engineering or related technical discipline.
• 5+ years of cloud engineering experience, with 3+ years in Azure production environments.
• Hands-on with Azure core services (compute, storage, networking, identity, PaaS).
• Proficient with Terraform, Bicep, or ARM templates for IaC.
• Experience operating AKS clusters at scale and CI/CD via Azure DevOps or GitHub Actions.
• Scripting skills in PowerShell, Bash, Python; strong automation focus.
• Deep knowledge of cloud security, identity, and compliance.
• Experience with monitoring/observability across distributed workloads.

Responsibilities

• Design and implement enterprise-grade Azure architectures focusing on scalability and cost.
• Develop and maintain IaC with Terraform, Bicep, or ARM templates.
• Configure Azure landing zones, VNets, subnets, and security groups with least-privilege access.
• Manage identity, access governance, and compliance using Azure AD and policies.
• Operate AKS clusters including node pools, auto-scaling, and security integration.
• Deploy and optimize Azure data services (SQL, Cosmos DB, Synapse, Data Factory).
• Build CI/CD pipelines using Azure DevOps or GitHub Actions for infra and apps.
• Establish observability with Azure Monitor, Log Analytics, and Application Insights.

Skills

Azure services

Terraform

Bicep

ARM templates

AKS

Azure DevOps

GitHub Actions

PowerShell

Python

Cloud security

Observability

Monitoring

Cost optimization

DevOps practices

Education

Bachelor's degree in Computer Science, Engineering, or related technical discipline

Tools

Terraform

Bicep

ARM templates

AKS

Azure DevOps

GitHub Actions

Istio

Linkerd

Azure Monitor

Application Insights

Azure Policy

Defender for Cloud

Job description

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States. This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: Cloud Solutions Engineer – Azure

Location: 100% Remote (U.S.)

Position Type: Full-time, Direct W2

Salary Range: $100,000–$150,000 Annually

Experience Required: 6+ years

Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary

We are seeking a skilledAzure Cloud Engineerto design, deploy, andoperatelarge-scale, secure, and resilient cloud platforms on Microsoft Azure. In this role you will own the end-to-end cloud engineering lifecycle, including architecture, infrastructure-as-code, automation, security hardening, cost optimization, observability, and ongoing operational excellence for production workloads. The ideal candidate will combine deep technicalexpertiseacross Azure services with strong DevOps engineering practices, and will partner closely with application development, security, and SRE teams to deliver cloud-native solutions that meet demanding business requirements for scalability, reliability, and compliance.

Key Responsibilities

• Design and implement enterprise-grade Azure cloud architectures spanningcompute, networking, storage, identity, and data services, with explicit attention to scalability, security, and total cost of ownership.
• Develop,maintain, and continuously improve infrastructure-as-code using Terraform, Bicep, or ARM templates, treating infrastructure changes with the same rigor as application code through version control and peer review.
• Configure and manage Azure landing zones, virtual networks, subnets, route tables, and network security groups to enforce strong segmentation and least-privilege connectivity between workloads.
• Implement secure identity, access management, and governance controls using Azure Active Directory, conditional access, role-based access control, and Azure Policy to ensure compliance with internal and regulatory standards.
• Architect andoperateAzure Kubernetes Service (AKS) clusters, including node pool design, auto-scaling, network policy, and integration with container registries and service meshes.
• Deploy, scale, and tune Azure data and analytics platforms such as Azure SQL, Cosmos DB, Synapse Analytics, Data Factory, and Event Hubs to meet specific workload patterns and SLAs.
• Build andoperatecomprehensive CI/CD pipelines using Azure DevOps or GitHub Actions, enabling fast, automated, and auditable releases of both infrastructure and application code.
• Design and implement robust observability practices using Azure Monitor, Log Analytics, Application Insights, and third‑party tooling, with thoughtful dashboards, alerting, and SLO tracking.
• Drive Azure cost optimization initiatives, including right‑sizing, reserved‑instance planning, lifecycle policies, and architectural changes that meaningfully reduce monthly cloud spend.
• Implement disaster‑recovery and business‑continuity strategies, including backup, geo‑replication, failover testing, and documented runbooks that have beenvalidatedthrough regular drills.
• Strengthen security posture by integrating Microsoft Defender for Cloud, Sentinel, key vault, and managed identities, and by routinely remediating findings from compliance scans.
• Collaborate closely with application teams to architect cloud‑native solutions, advising on patterns, anti‑patterns, and Azure‑native services that best fit each problem domain.
• Develop automation scripts and tooling in PowerShell, Bash, and Python to streamline repetitive operational work and reduce time‑to‑resolution for common incidents.
• Mentor junior engineers, lead architecture reviews, and contribute actively to internal communities of practice around Azure and DevOps.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, ora relatedtechnical discipline.
• Five or more years of cloud engineering experience, with at least three years focused on Microsoft Azure in production environments.
• Strong hands‑on experience with Azure core services, includingcompute, storage, networking, identity, and platform-as-a-service offerings.
• Production‑level experience with infrastructure‑as‑code tools such as Terraform, Bicep, or ARM templates.
• Solid experience designing and operating Azure Kubernetes Service (AKS) clusters at scale.
• Hands‑on experience with Azure DevOps or GitHub Actions for CI/CD across infrastructure and applications.
• Strong scripting skills in PowerShell, Bash, and Python, with the ability to write maintainable automation code.
• Deep understanding of cloud security principles, identity management, and compliance frameworks.
• Experience implementing monitoring, alerting, and observability strategies across distributed workloads.
• Strong troubleshooting, communication, and documentation skills.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert or Azure DevOps Engineer Expert certification.
• Experience operating hybrid cloud or multi‑cloud environments spanning Azure and on‑premises infrastructure.
• Familiarity with service mesh technologies such as Istio orLinkerdon AKS.
• Exposure to FinOps practices and cloudcost‑managementtooling.
• Experience with regulated environments such as HIPAA, PCI‑DSS, SOC 2, or FedRAMP.

Bright Vision Technologies is an Equal Opportunity Employer.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.