Senior Cloud Engineer (Azure)

Proxify AB; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

Proxify AB is seeking a Senior Cloud Engineer focused on Microsoft Azure to design, automate, and maintain enterprise-grade cloud infrastructure.

You will own Azure landing zones, AKS, and CI/CD automation, building secure, cost-efficient, zero-trust deployments while collaborating across teams.

Required comfort with Terraform/Bicep, Azure DevOps or GitHub Actions, and monitoring tools such as Azure Monitor and Application Insights.

Qualifications

• 5+ years of hands-on cloud engineering experience with Azure.
• In-depth experience automating infrastructure with Terraform or Bicep.
• Proven ability to design, secure, and scale AKS clusters.
• Experience with CI/CD pipelines in Azure DevOps or GitHub Actions.
• Knowledge of zero-trust security, Entra ID, Key Vault and RBAC.
• Proficiency in monitoring with Azure Monitor, Application Insights and logs.

Responsibilities

• Architect and deploy enterprise-grade Azure infrastructure with IaC and modular libraries.
• Provision and optimize AKS clusters, including autoscaling and ingress routing.
• Design and secure automated CI/CD pipelines to accelerate deployments.
• Enforce policy guardrails, audit IAM roles, rotate secrets, and mitigate vulnerabilities.
• Monitor systems, investigate incidents, perform RCA, and optimize costs.

Skills

Cloud engineering

Azure

CI/CD

Security governance

Monitoring & observability

FinOps/cost optimization

Tools

Terraform

Bicep

AKS

Helm

Azure DevOps

GitHub Actions

Azure Monitor

Log Analytics

Application Insights

Key Vault

Entra ID

RBAC

Datadog

Dynatrace

Azure Arc

Job description

The Role:

We are looking for a Senior Cloud Engineer specializing in Microsoft Azure on behalf of our client to design, automate, and maintain high-availability cloud infrastructure. In this role, you will take operational ownership of enterprise Azure landing zones, container orchestration, and CI/CD pipeline automation-ensuring high reliability, cost efficiency, and zero-trust security compliance. You are a perfect candidate if you are growth-oriented, you love what you do, and you enjoy working on new ideas to develop exciting products.

What we are looking for:

5+ years of hands-on cloud engineering experience managing enterprise Microsoft Azure environments, spanning compute, networking (VNets, ExpressRoute, Application Gateways), and storage tiers. Advanced mastery of Terraform or Bicep for provision automation, drift detection, and maintaining state files across multi-subscription environments. Proven track record building, securing, and scaling Azure Kubernetes Service (AKS) clusters, managing ingress controllers, and deploying applications using Helm charts. Deep proficiency in constructing automated build and deployment pipelines using Azure DevOps or GitHub Actions, enforcing automated security scanning, policy compliance, and zero-downtime releases. Solid understanding of cloud security governance using Microsoft Entra ID (formerly Azure AD), Azure Key Vault, Azure Policy, and implementing Role-Based Access Control (RBAC) under a Zero Trust model. Experience configuring end-to-end monitoring and alerting using Azure Monitor, Log Analytics, Application Insights, or third-party platforms (Datadog, Dynatrace). Located in CET timezone (+/- 3 hours), we are unable to consider applications from candidates in other time zones. Nice-to-have: Azure certifications such as AZ-104 (Azure Administrator), AZ-305 (Azure Solutions Architect), or AZ-400 (DevOps Engineer Expert). Programming literacy in Python, Go, or PowerShell/Bash for infrastructure scripting and operator development. Experience with cloud cost optimization frameworks (FinOps) and managing Azure Cost Management policies. Exposure to hybrid cloud configurations or Azure Arc implementations.

Responsibilities:

Architect and deploy enterprise-grade Azure infrastructure using Terraform/Bicep, maintaining modular IaC libraries and strict state management workflows. Provision, patch, and optimize Azure Kubernetes Service (AKS) clusters, managing autoscaling, ingress routing, and service mesh policies. Design, maintain, and secure automated CI/CD pipelines in Azure DevOps/GitHub Actions to accelerate developer deployment cycles. Enforce Azure Policy guardrails, audit IAM roles via Entra ID, manage secret rotation in Key Vault, and mitigate vulnerabilities identified by Defender for Cloud. Monitor system metrics, respond to infrastructure incidents, conduct root-cause analyses (RCA), and optimize cloud resource utilization to drive cost efficiencies.