Senior Cloud Infrastructure Engineer

About the Role We are seeking a highly skilled and experienced Cloud Infrastructure Engineer L3 with a strong background in both AWS and Azure managed services as well as on-premise infrastructure The ideal candidate will have a proven track record of designing deploying and managing complex highly available and secure mixed infrastructure environments This role requires expertise in integrated security authentication access control software development practices and critical data protection for consumer information You will be a key contributor to our infrastructure team ensuring the reliability scalability and security of our cloud and hybrid systems Key Responsibilities Design implement and manage highly available scalable and secure cloud infrastructure solutions across AWS and Azure as well as on-premise environments Deploy and maintain mixed infrastructure solutions ensuring seamless integration between on-premise and cloud-based systems Implement and enforce robust security measures including integrated security frameworks authentication protocols and access control mechanisms e g AWS IAM policies Azure RBAC AWS Network Security Groups Azure Network Security Groups WAF Develop and maintain infrastructure as code IaC using tools like Terraform and Helm for consistent and automated deployments Collaborate closely with software development teams to integrate applications with cloud services and ensure infrastructure readiness for new features Implement and manage comprehensive data protection strategies for sensitive consumer data such as electric meter readings and billing information ensuring compliance and integrity e g AWS KMS Azure Key Vault Design deploy and manage monitoring and alerting systems e g Prometheus Grafana AWS CloudWatch Azure Monitor Log Analytics to ensure real-time visibility and proactive issue resolution Troubleshoot and optimize infrastructure performance addressing complex issues across network layers OSI Level 1-7 Contribute to the continuous improvement of CI CD pipelines automation and DevOps practices e g AWS CodePipeline CodeDeploy Azure DevOps Pipelines Ensure adherence to IT Security best practices including CIS Security Framework deployment SELinux SUDO Linux and Windows AD Azure Entra Domain Services IAM deployment Manage and configure network components such as Firewalls e g AWS Network Firewall Azure Firewall Network Security Groups Load Balancers L3-L7 - e g AWS ELB ALB Azure Load Balancer Application Gateway NAT PAT and VPNs e g AWS VPN Gateway Azure VPN Gateway Develop and maintain custom WAF rules e g AWS WAF Azure WAF ModSecurity to protect web applications Participate in an Agile development environment contributing to sprint planning execution and reviews Requirements Minimum 5 years of hands-on experience in cloud infrastructure engineering with a strong focus on AWS and Azure Deep expertise in AWS managed services including but not limited to EC2 S3 VPC IAM Lambda ECS Elastic Container Service CodePipeline CodeDeploy CloudWatch KMS ELB ALB NLB and AWS VPN Gateway Strong knowledge of Azure specific managed services including Azure Virtual Machines Azure Blob Storage Azure Virtual Network VNet Azure Active Directory Azure RBAC Azure Functions Azure Container Instances Azure App Service for container deployment Azure DevOps Pipelines Azure Monitor Log Analytics Azure Key Vault Azure Load Balancer Application Gateway Azure VPN Gateway Azure Firewall and Azure Entra Domain Services Proven experience in deploying and managing mixed infrastructure environments on-premise and cloud-based with a focus on seamless integration and hybrid connectivity Solid background in software development understanding of development methodologies and ability to collaborate effectively with engineering teams Extensive experience with data protection strategies for sensitive consumer data including encryption access controls and compliance Expertise in IT Security principles and implementation including CIS Security Framework deployment Web Application Firewalls WAF in AWS Azure and standalone solutions e g ModSecurity with custom rule development Network Routing Firewalls and VPNs Network OSI Model Level 1-7 understanding SELinux and SUDO Linux deployment Windows Active Directory and Azure Entra Domain Services IAM deployment Experience in LDAP Deployment as a central authentication mechanism for Operating Systems Windows as AD Linux as LDAP Auth Fortinet LDAP auth and as SSO for WebApp Services Experience with Multi-Factor Authentication MFA solutions such as Microsoft Authenticator Google Authenticator and SMS-based One-Time Passwords OTP Hands-on experience with containerization technologies specifically Docker and Docker services e g AWS ECS Azure Container Instances Azure App Service Proficiency in version control systems e g Git and developing maintaining CI CD pipelines e g AWS CodePipeline CodeDeploy Azure DevOps Pipelines Experience with serverless frameworks and event-driven architecture e g AWS Lambda Azure Functions Strong knowledge of DevOps practices and tools Hands-on experience with monitoring and alerting tools such as Prometheus Grafana Prometheus Alertmanager routing alerts via Slack PagerDuty email AWS CloudWatch and Azure Monitor Log Analytics Experience with infrastructure as code IaC tools like Terraform and Helm Familiarity with Lightspeed and Udeploy Experience working in an Agile development methodology Preferred Qualifications Relevant cloud certifications e g AWS Certified Solutions Architect - Professional AWS Certified DevOps Engineer - Professional Azure Solutions Architect Expert Azure DevOps Engineer Expert Experience with other monitoring tools and observability platforms Strong problem-solving skills and the ability to work independently and as part of a team Excellent communication and interpersonal skills