Senior Azure Cloud Engineer

Job Purpose

The Senior Azure Cloud Engineer will serve as the primary Azure subject matter expert (SME), driving cloud architecture standards, automation, security, and governance across the organization. The Senior Azure Cloud Engineer will collaborate with cross-functional teams including infrastructure, security, application development, and business stakeholders to ensure delivery of a secure, scalable, and cost-efficient cloud environment.

Duties & Responsibilities

• Design, deploy, and manage enterprise-grade Azure cloud infrastructure solutions including compute (RAM, CPU), networking, storage, identity, and PaaS services
• Develop and maintain Infrastructure-as-Code (IaC) using Terraform; enforce automation and repeatability across all cloud deployments
• Build and manage CI/CD pipelines using Azure DevOps or GitHub Actions to support automated provisioning and application deployments
• Implement and manage Azure governance frameworks including Azure Policy, RBAC, management groups, and tagging strategies
• Enforce cloud security best practices using Microsoft Defender for Cloud, Azure Security Center, Entra ID (Azure AD), and zero-trust principles
• Manage cloud cost optimization through Azure Cost Management, reserved instances, right-sizing, and FinOps practices
• Monitor cloud infrastructure using Azure Monitor, Log Analytics, and Azure Sentinel; troubleshoot and resolve performance and connectivity issues
• Lead workload assessment, migration planning, and modernization of on-premises applications to Azure
• Mentor junior and mid-level engineers; foster a culture of continuous improvement and cloud engineering excellence
• Prepare and maintain comprehensive documentation including architecture diagrams, runbooks, and operational playbooks
• Stay current with emerging Azure technologies and recommend new services, tools, and approaches aligned with business objectives
• Ensure compliance with regulatory and industry standards (e.g., HIPAA, SOC 2, PCI-DSS, HITRUST as applicable)
• Other duties as assigned
• Use, protect and disclose patients' protected health information (PHI) only in accordance with Health Insurance Portability and Accountability Act (HIPAA) standards

• Understand and comply with Information Security and HIPAA policies and procedures at all times
• Limit viewing of PHI to the absolute minimum as necessary to perform assigned duties

Required Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience
• 7+ years of IT experience with 4+ years in a hands-on Azure cloud engineering role
• Deep expertise in core Azure services: Compute (VMs, AKS, App Services), Networking (VNet, NSG, Azure Firewall, Application Gateway), Storage, and Entra ID
• Strong proficiency in Infrastructure-as-Code using Terraform
• Hands-on experience with Azure DevOps and/or GitHub Actions for CI/CD automation.
• Proficiency in scripting languages: PowerShell, Azure CLI, and/or Python
• Proven experience with Azure governance, Azure Policy, RBAC, and security baseline implementation
• In-depth knowledge of Azure networking concepts: Virtual Networks, NSGs, DNS, VPN, ExpressRoute, and subnet management
• Experience with Azure Monitor, Log Analytics, and Azure Sentinel for observability and security monitoring
• Microsoft Azure certification required
• Ability to manage multiple projects simultaneously in a fast-paced environment
• Proficiency in Microsoft Office Suite
• Strong interpersonal skills, ability to communicate well at all levels of the organization
• Strong problem solving and creative skills and the ability to exercise sound judgment and make decisions based on accurate and timely analyses
• High level of integrity and dependability with a strong sense of urgency and results oriented
• Excellent written and verbal communication skills required

Preferred Qualifications

• Experience with Kubernetes (AKS) and containerized workload management
• Familiarity with multi-cloud environments (AWS) or hybrid cloud architectures
• Experience with DevSecOps practices and security-integrated pipelines
• Knowledge of FinOps frameworks and cloud financial governance best practices
• Experience with Azure Virtual Desktop (AVD) or enterprise-scale landing zone deployments
• Familiarity with Jira, Confluence, or similar project and documentation tools

Working Conditions

• Ability to work outside of normal business hours and/or on-call as needed
• Occasional travel to other company locations required
• Must possess a smart-phone or electronic device capable of downloading applications, for multifactor authentication and security purposes
• Physical Demands: While performing the duties of this job, the employee is occasionally required to move around the work area; Sit; perform manual tasks; operate tools and other office equipment such as computer, computer peripherals and telephones; extend arms; kneel; talk and hear
• Mental Demands: The employee must be able to follow directions, collaborate with others, and handle stress
• Work Environment: The noise level in the work environment is usually minimal

Med-Metrix will not discriminate against any employee or applicant for employment because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, veteran status, other non-merit based factors, or any other characteristic protected by federal, state or local law.