Lead Azure Cloud Engineer

Quick Facts

Lead Azure Cloud Engineer role focused on architecting and delivering secure, scalable, cost-effective Azure cloud platforms.

Description

You will architect, develop, automate, and manage production-ready Azure solutions, partnering with Cloud Architects, Platform Engineering, DevOps, Security, Networking, Data, AI, and Product teams. Work spans Azure infrastructure, AKS, containers, DevOps pipelines, Infrastructure as Code, observability, security controls, and AI-driven cloud solutions.

Responsibilities

• Architect, deploy, and manage Azure cloud infrastructure: subscriptions, resource groups, networking, identity, governance, security, and platform services
• Create repeatable Azure deployment patterns for applications, APIs, front-end workloads, microservices, containers, serverless, data integrations, and AI-driven solutions
• Deploy and manage Azure Kubernetes Service (AKS): node pools, ingress, workload identity, secrets management, autoscaling, monitoring, container registry integration, and security controls
• Build and enhance Infrastructure as Code with Terraform (reusable modules, multi-environment deployments, automated validation, CI/CD integration)
• Architect CI/CD pipelines using GitHub Actions, Azure DevOps, GitLab CI/CD, or comparable tooling
• Enable DevOps and DevSecOps practices: automated builds/testing, security scanning, artifact management, environment promotion, approvals, rollback strategies, and release automation
• Use GitHub Copilot and AI-assisted engineering tools for scripting, IaC, pipeline creation, code review, troubleshooting, documentation, and automation
• Deploy cloud-native solutions with Azure services (App Service, Azure Functions, Logic Apps, Event Grid, Service Bus, Storage, Key Vault, API Management, Azure SQL, Cosmos DB, Azure Monitor, Application Insights)
• Assist with AI-driven deployments using Azure AI services (Azure AI, Azure OpenAI, Azure AI Search, Azure Machine Learning)
• Integrate AI components using patterns like RAG, agentic workflows, multi-agent orchestration, tool/function calling, prompt management, grounding, evaluation, and responsible AI
• Implement secure integration patterns (managed identities, RBAC, private endpoints, private DNS, NSGs, firewalls, API gateways)
• Set up observability with Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerts, distributed tracing, and operational runbooks
• Resolve complex production incidents across cloud, networking, deployment, performance, security, and integrations
• Apply DevSecOps including secrets management, dependency scanning, container image scanning, policy validation, secure configuration, and compliance automation
• Tune Azure environments for performance, reliability, scalability, and cost efficiency
• Contribute to standards, reusable templates, documentation, operational procedures, and platform engineering practices
• Provide technical guidance, mentoring, code reviews, and engineering leadership
• Collaborate with architects and stakeholders to translate requirements into secure, maintainable Azure implementations

Requirements

• Extensive hands-on experience architecting, deploying, and managing Azure cloud solutions in enterprise settings
• Sound knowledge of Azure networking, identity, governance, security, monitoring, and platform services
• Hands-on experience with Azure Landing Zone and hub-and-spoke networking (private endpoints, private DNS, firewalls, NSGs, route tables, workload integration patterns)
• Extensive hands-on experience with AKS and container platforms (registries, ingress, workload identity, autoscaling, monitoring, container security)
• Substantial experience with Terraform for Infrastructure as Code (modules, state, validation, multi-environment delivery)
• Substantial experience with CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI/CD, or similar)
• Solid grasp of DevOps/DevSecOps (automated testing, security scanning, artifact management, release automation, deployment governance)
• Experience with GitHub workflows (pull requests, code reviews, branching and collaboration)
• Hands-on experience using GitHub Copilot or comparable AI-assisted development tools
• Experience with Azure PaaS and integration services (App Service, Azure Functions, Logic Apps, API Management, Event Grid, Service Bus, Storage, Key Vault, Azure SQL, Cosmos DB)
• Experience deploying observability using Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerting, and runbooks
• Knowledge of Azure AI and Generative AI services (notably Azure OpenAI and Azure AI Search)
• Working knowledge of AI architecture patterns (RAG, agentic workflows, multi-agent systems, tool/function calling, grounding, prompt management, evaluation, responsible AI)
• Ability to resolve complex technical issues across cloud infrastructure, networking, containers, CI/CD, security, and application integration
• Strong scripting and automation skills with PowerShell, Bash, Python, or similar languages
• Ability to operate independently and own technical delivery and production-grade cloud support
• Excellent communication skills and ability to collaborate with architects, security teams, engineers, product teams, and business stakeholders

Nice to have

• Microsoft Azure certifications (Azure Administrator Associate, Azure Developer Associate, Azure DevOps Engineer Expert, Azure Solutions Architect Expert)
• Kubernetes certifications (CKA, CKAD, CKS)
• Production-grade AKS experience (service mesh, GitOps, Helm, Kustomize, Flux, Argo CD, Kubernetes policy engines)
• Experience with Azure AI Foundry and orchestration frameworks (Semantic Kernel, LangChain, LangGraph, AutoGen, etc.)
• Experience building/supporting RAG platforms, AI agents, multi-agent workflows, or enterprise knowledge search
• Platform engineering and internal developer platforms (self-service cloud capabilities, paved roads, reusable templates)
• Experience in regulated industries with strong compliance, security, auditability, and governance
• Familiarity with SRE practices (incident response, reliability engineering, performance testing, cost optimization)

Benefits

• Hybrid work model with opportunity to work remotely within Poland; chance to work abroad up to 60 days annually; relocation opportunities
• Career development programs, mentoring, soft skills and well-being programs, certification support (including Azure and other cloud providers), and English classes
• Stable pay; Employee Stock Purchase Plan with a 15% discount
• Benefits package (health insurance, Multisport, shopping vouchers) and referral bonuses up to $2,000
• Office events and activities (social/well-being events; entertainment and relaxation zones)
• Contractor option available; B2B terms agreed individually

Benefits listed are available to employees only.