Lead Cloud Engineer

Quick Facts

• Role: Lead Cloud Engineer (Azure)
• Focus: Unified Automation Platform / Internal Developer Platform
• Work: Remote-friendly (Georgia) and office options in Tbilisi, Batumi, and Kutaisi

Description

Lead Azure automation and AKS operations for a platform that standardizes secure, repeatable infrastructure delivery across Azure and on-premises VMware using templates and golden paths. Own Terraform/OpenTofu modules, image factory pipelines, configuration as code, and Backstage golden-path integration, while improving IaC/CaC engineering practices and troubleshooting production automation issues.

Responsibilities

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres.
• Build and operate AKS day-to-day: cluster/node pools, add-ons (ingress, cert-manager, external-dns, monitoring, policy), and namespace/tenant onboarding.
• Implement identity wiring (managed identities, SPN/app registrations) and secrets integration (Azure Key Vault, OpenBao).
• Build and maintain Image Factory pipelines for Linux/Windows golden images, including cloudbase-init baselines, CIS hardening, and image scanning.
• Execute Ansible Configuration as Code playbooks for VM post-provisioning and golden-image handoff.
• Integrate Azure provisioning into Backstage golden paths and ensure end-to-end testing of generated infrastructure.
• Troubleshoot and remediate production issues across Azure automation modules.
• Contribute to module testing, drift detection, and documentation per platform IaC engine standards.

Requirements

• 5+ years hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps.
• At least 1 year of relevant leadership experience.
• Production experience operating AKS, including networking, policy, and namespace management.
• Experience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets).
• Experience with Ansible for VM post-provisioning and golden-image pipelines.
• Working knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient to integrate with network foundation.
• Strong proficiency as a Terraform (IaC) and Ansible (CaC) developer, using GitHub Copilot (project-wide) as standard practice.
• Excellent written and spoken English (B2+).

Benefits

• Enjoyable working environment (offices or home)
• Opportunity to work abroad up to two months per year; relocation options across 55+ countries
• Corporate and social events
• Leadership development, career advising, soft skills and well-being programs
• Certifications (GCP, Azure, AWS) and unlimited access to internal learning database
• Free English classes
• Participation in Employee Stock Purchase Plan; referral bonuses
• Comprehensive medical & family care package; five trust days per year
• Benefits package (sports activities, variety of stores and services)