Lead Azure Cloud Engineer: Data Platform & IAM Security

Egen; Oregon; Ibrido; USD 150.000 - 205.000; Tempo pieno

Vantaggi offerti da questo lavoro

Comprehensive Health Insurance

Paid Leave (Vacation/PTO)

Paid Holidays

Sick Leave

Parental Leave

Bereavement Leave

401(k) Employer Match

Employee Referral Bonuses

Descrizione del lavoro

Egen in the United States seeks a senior cloud engineer to design and run an Azure-based data platform. You will create reusable Terraform modules, manage a three-plane architecture, and secure cross-cloud networking with Google Cloud while ensuring PHI-compliant handling.

You'll deploy AKS, PostgreSQL, storage, and identity services, while enforcing RBAC, governance, and observability across stage, dev, and prod environments.

Competenze

• Experience designing Terraform modules for Azure data platforms.
• Proficient in IaC delivery and deployment pipelines.
• Experience with multi-cloud networking and secure communications.
• Hands-on with AKS, Azure PostgreSQL, and storage services.

Mansioni

• Design, author and maintain reusable Terraform modules for Azure enterprise data estate.
• Implement three-plane architecture across subscriptions and environments.
• Configure private networking between Azure and Google Cloud ADL with private endpoints.
• Deploy and configure AKS, Azure PostgreSQL, Blob Storage, Key Vault and ACR.
• Integrate Entra ID RBAC, SailPoint governance, and JIT elevated access.
• Set up centralized logging/monitoring and ensure PHI is excluded.

Conoscenze

Azure expert

Terraform

Hybrid multi-cloud

Networking security

Strumenti

Terraform

Spacelift

Azure DevOps

GitHub Enterprise

AKS

PostgreSQL

Blob Storage

Key Vault

ACR

Entra ID

SailPoint

Descrizione del lavoro

Egen in the United States seeks a senior cloud engineer to design and run an Azure-based data platform. You will create reusable Terraform modules, manage a three-plane architecture, and secure cross-cloud networking with Google Cloud while ensuring PHI-compliant handling.

You'll deploy AKS, PostgreSQL, storage, and identity services, while enforcing RBAC, governance, and observability across stage, dev, and prod environments.