Senior Cloud Engineer AP

What is special about Lighthouse?
Lighthouse is built on a foundation of unique, compassionate, highly driven individuals. We elevate the strengths and talents of those around us while leveraging opportunities for growth. We offer the experience of solving complex problems while continuing to grow multiple facets of your career. Lighthouse is where innovation meets support and where collaboration is the key ingredient to success. We grow together and are stronger together.

What's unique about this role?
This role is responsible for maintaining and developing optimum cloud network infrastructure that ensures stability, scale and performance. This will require working with tools such as Docker, Kubernetes and automating pipelines through Azure DevOps & Terraform. This role focuses on building and maintaining secure, scalable, and efficient cloud systems. The ideal candidate will have hands-on expertise in software development, infrastructure, automation and container orchestration.

As a Senior Lead Cloud Engineer, you will design and implement solutions for complex, large-scale systems. You will collaborate across teams to deliver innovative, reliable cloud infrastructure while maintaining a strong focus on scalability, security, and cost efficiency. This role offers opportunities to lead technical initiatives and continuously enhance your expertise.

This role will collaborate closely with development, IT, and operations teams to ensure seamless integration and scalability of systems, focusing on performance, security, and automation.

What will this person do?
Leadership & Strategy

• Provide technical leadership and mentorship to cloud networking engineers.
• Collaborate with architecture, security, and application teams to define network standards and best practices.
• Drive strategic decisions on network modernization, automation, and zero trust networking in Azure.

Cloud Architecture & Implementation

• Design and implement scalable, secure, and highly available cloud infrastructure solutions using Microsoft Azure services.
• Define and evolve cloud reference architectures, best practices, and technical standards aligned with enterprise needs.
• Lead the architecture, deployment, and optimization of Azure-based network infrastructure, including VNETs, ExpressRoute, VPN Gateways, Azure Firewall, Application Gateway, Private Link, and Load Balancers.
• Design and enforce hub-and-spoke, virtual WAN, and multi-region topologies to ensure secure, scalable, and high-performing networks.

Infrastructure as Code & Automation

• Develop and maintain Infrastructure as Code (IaC) using tools like Terraform, Bicep, or ARM templates.
• Automate provisioning, configuration, and deployment processes using Azure DevOps, GitHub Actions, or PowerShell.
• Implement and maintain CI/CD pipelines for infrastructure and application delivery.

Security, Governance & Compliance

• Define and enforce Azure governance policies using Azure Policy, Management Groups, RBAC, and Blueprints.
• Ensure compliance with security and regulatory standards (e.g., ISO, SOC2, HIPAA, NIST) through policy-driven automation.
• Integrate Azure-native security tools such as Microsoft Defender for Cloud, Azure Key Vault.
• Enforce network security policies, data protection measures, and role-based access controls.
• Work closely with the Cloud Security team to implement Zero Trust principles, DDoS protection, and network threat detection.
• Ensure compliance with industry standards (e.g., ISO 27001, HIPAA, SOC 2) in network configurations and access.

Operations & Monitoring

• Manage operational health, cost, and performance of Azure workloads using Azure Monitor, Log Analytics, and Application Insights.
• Optimize cloud spend and resource utilization with Azure Cost Management and reserved instances planning.
• Implement backup, disaster recovery, and high-availability solutions using Azure Site Recovery and Availability Zones/Sets.

Bring your passion and together we will shine. It would also be great if you had the following:

• Bachelor of Science Degree in Computer Science or Engineering, or a related field.
• 10+ years of experience in cloud operations, cloud networking, cloud security, SRE or software development with a strong focus on automation and cloud infrastructure management.
• Azure certifications (e.g., Microsoft Certified: Azure DevOps Engineer Expert, Azure Solutions Architect).
• Experience in agile development environments and working with Cloud Governance, Monitoring, SRE (Site Reliability Engineering) practices.
• Strong understanding of cloud-native architecture and containerization (AKS, ACR, Helm).
• Proficient in scripting and automation using PowerShell, Bash, and Azure CLI.
• Experience with Azure Policy, Blueprints, and management groups for governance.
• Knowledge of Azure landing zone architecture and enterprise-scale design principles.
• Familiar with service mesh, API management, and event-driven architecture.
• Expertise in configuring and optimizing Azure Monitor, Log Analytics, and Application Insights for proactive alerting and observability.
• Experience integrating logs and metrics with centralized platform
• Strong knowledge of Azure security controls: NSGs, ASGs, DDoS protection, Sentinel, Defender for Cloud.
• Experience implementing RBAC, Azure AD Conditional Access, and Just-In-Time VM Access.
• Familiar with data encryption strategies (encryption at rest/in transit, Key Vault, customer-managed keys).
• Proven experience leading cross-functional teams and mentoring engineers.
• Strong stakeholder management and ability to translate technical needs to business value.
• Skilled in fostering a culture of automation, observability, and operational excellence.
• Critical thinker and problem-solving skills.
• Experience in mentoring team members
• Result Driven and Proactive
• Good time-management skills.
• Great interpersonal and communication skills.
• Azure Database Administrator Associate certification is a plus.
• eDiscovery and relativity experience are an added advantage

Work Environment and Physical Demands

• Duties are performed in a typical office environment while at a desk or computer table.
• Duties require the ability to use a computer, communicate over the telephone, and read printed material, in a quiet and professional setting.
• Duties may require being on call periodically and working outside normal working hours (evenings and weekends).

Lighthouse celebrates and thrives on diversity and is an Equal Opportunity Employer. We hire, train, and promote regardless of race, religion, color, national origin, sex, disability, age, veteran status, and other protected status as required by applicable law. We welcome any talents and contributions you can bring to the team and are deeply committed to growing an environment where everyone can feel safe, is respected, and can show up as themselves. Come as you are

As required by applicable pay transparency laws, Lighthouse complies with compensation disclosure requirements for roles that may be hired in locations under these requirements. Factors that may be used to determine your actual salary may include a wide array of factors, including: your specific skills and experience, geographic location, or other relevant factors. The salary range for this position may be tailored to be lower or higher in different talent markets.

This role will be eligible to participate in an annual bonus or incentive program.

As a trailblazer and catalyst for change, Lighthouse rises to each opportunity to help our clients, and our people do what they do best—shine.

This position will work for and be employed by Lighthouse's India subsidiary, which is an independent company located in India.