Lead Azure Cloud Engineer

Quick Facts

• Architects and delivers secure, scalable, and cost-effective cloud solutions on Microsoft Azure
• Focus areas include infrastructure, containers, DevOps pipelines, Infrastructure as Code, observability, security, and Azure AI

Description

You will lead the architecture, development, automation, and management of production-ready Azure platforms. The role covers Azure infrastructure and networking, AKS container environments, Terraform-based IaC, CI/CD pipeline engineering, observability and runbooks, and DevSecOps practices. You will also contribute to AI-driven cloud solutions and enterprise AI patterns on Azure.

Responsibilities

• Architect, deploy, and manage Azure infrastructure (subscriptions, resource groups, networking, identity, governance, security)
• Build repeatable Azure deployment patterns for applications, microservices, containers, serverless, data integrations, and AI-enabled solutions
• Deploy and manage AKS environments (node pools, ingress, workload identity, secrets, autoscaling, monitoring, registry integration)
• Create and enhance Infrastructure as Code with Terraform (reusable modules, multi-environment delivery, CI/CD integration)
• Architect CI/CD pipelines with GitHub Actions, Azure DevOps, GitLab CI/CD, or similar tools
• Enable DevOps/DevSecOps automation for testing, security scanning, artifacts, approvals, rollbacks, and release automation
• Use GitHub Copilot and AI-assisted tooling to speed up scripting, IaC, pipeline creation, review, troubleshooting, documentation, and automation
• Deploy Azure PaaS and integration services (App Service, Functions, Logic Apps, Event Grid, Service Bus, Storage, Key Vault, API Management, Azure SQL, Cosmos DB)
• Support AI solution deployments using Azure AI services (Azure AI, Azure OpenAI, Azure AI Search, Azure Machine Learning)
• Implement AI components and patterns such as RAG, agentic workflows, multi-agent orchestration, tool/function calling, prompt management, grounding, evaluation, and responsible AI controls
• Implement secure integration patterns (managed identities, RBAC, private endpoints, private DNS, NSGs, firewalls, API gateways)
• Own observability setup with Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerts, distributed tracing, and runbooks
• Troubleshoot complex cloud, networking, deployment, performance, security, and production incidents
• Implement DevSecOps controls (secrets management, dependency and image scanning, policy validation, secure configuration, compliance automation)
• Tune environments for performance, reliability, scalability, and cost efficiency
• Contribute to standards, reusable templates, documentation, operational procedures, and platform engineering practices
• Provide technical guidance, mentoring, and code reviews; collaborate to turn requirements into secure, maintainable Azure implementations

Requirements

• Extensive hands-on experience architecting, deploying, and managing Azure cloud solutions in enterprise settings
• Strong knowledge of Azure networking, identity, governance, security, monitoring, and platform services
• Hands-on experience with Azure Landing Zone concepts and hub-and-spoke networking (private endpoints, private DNS, firewalls, NSGs, route tables)
• Extensive hands-on experience with AKS, containers, container registries, ingress, workload identity, autoscaling, monitoring, and container security
• Substantial experience with Terraform (modules, state management, validation, multi-environment delivery)
• Substantial experience with CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI/CD, or similar)
• Solid grasp of DevOps/DevSecOps (automated testing, security scanning, artifact management, release automation, deployment governance)
• Experience with GitHub and collaborative workflows (pull requests, code reviews, branching strategies)
• Hands-on experience using GitHub Copilot or comparable AI-assisted development tools
• Experience with Azure PaaS and integrations (App Service, Functions, Logic Apps, API Management, Event Grid, Service Bus, Storage, Key Vault, Azure SQL, Cosmos DB)
• Experience deploying observability using Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerting, and runbooks
• Knowledge of Azure AI and Generative AI services (Azure OpenAI, Azure AI Search, Azure AI services)
• Working knowledge of AI architecture patterns including RAG and agentic/multi-agent workflows plus responsible AI
• Ability to resolve complex issues across infrastructure, networking, containers, CI/CD, security, and app integration
• Strong scripting and automation skills using PowerShell, Bash, Python, or similar
• Ability to operate independently and own delivery for production-grade cloud environments
• Excellent communication and collaboration across architects, engineers, security, product, and stakeholders

Benefits

• Hybrid-by-design with opportunity to work remotely within Poland
• Chance to work abroad up to 60 days annually; relocation opportunities
• Career development programs, mentoring and thought leadership, certification support, English classes
• Stable pay; Employee Stock Purchase Plan with 15% discount; benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000; events and well-being initiatives