Cloud Infrastructure Engineer

Quick Facts

• Primary platform: Microsoft Azure
• Focus: secure, resilient, scalable cloud infrastructure and automation
• Collaborates with security, operations, application owners, and stakeholders

Description

Design, implement, operate, and continuously improve secure, resilient, and scalable cloud infrastructure services supporting MSF/SITS stakeholders globally, with Azure as the primary focus. Apply cloud-agnostic engineering principles across infrastructure, automation, networking, identity, monitoring, resilience, and governance. Ensure services are well-architected, cost-effective, compliant with organizational standards, and aligned with operational, security, and business requirements.

Responsibilities

• Design, implement, operate, and continuously improve cloud infrastructure services that support MSF operational needs and SITS service commitments
• Translate operational, security, and functional requirements into practical infrastructure designs
• Build and maintain cloud and infrastructure components across compute, storage, networking, identity, monitoring, backup, automation, and platform services
• Contribute to cloud architecture, migration, and modernisation by assessing environments and recommending fit-for-purpose approaches
• Develop and maintain infrastructure as code, automation scripts, deployment templates, and operational runbooks
• Apply governance, security, resilience, and compliance controls in line with policies and industry good practice
• Monitor health, capacity, performance, reliability, and cost consumption; recommend improvements
• Support incident, problem, and change management with technical analysis, remediation, documentation, and follow-up
• Collaborate to ensure infrastructure services are transparent, maintainable, and aligned with MSF priorities
• Produce clear technical documentation, diagrams, and operational guidance for technical and non-technical stakeholders
• Keep knowledge up to date and contribute to continuous improvement of SITS engineering practices

Requirements

• Bachelor’s degree or higher in an IT-related stream
• Strong hands-on knowledge of Microsoft Azure infrastructure and platform services (VMs, storage, virtual networks, load balancing, private connectivity, backup/recovery, monitoring, app hosting, managed database services)
• Good understanding of Azure identity, access management, and security foundations (Microsoft Entra ID, RBAC, privileged access, conditional access, integration with enterprise identity)
• Ability to design and operate secure, reliable, scalable Azure landing zones, subscriptions, resource groups, networking patterns, governance controls, and shared infrastructure services
• Experience translating operational, security, and business requirements into Azure architectures, technical designs, implementation plans, and migration recommendations
• Experience with infrastructure as code, automation, and configuration management using Terraform, Bicep or ARM templates, PowerShell, Bash, Git, Azure DevOps (or comparable toolchains)
• Knowledge of cloud governance and operational standards (tagging, policy management, cost management, monitoring/logging, backup/DR, security baselines, change control)
• Experience supporting assessments, proof-of-concept, migration, and modernisation for workloads moving from traditional infrastructure/hybrid environments/other clouds into Azure
• Working knowledge of Windows Server, networking, storage, DNS, certificates, backup and recovery concepts, and hybrid connectivity patterns
• Ability to troubleshoot incidents, analyze performance/capacity issues, identify root causes, document remediation, and improve services continuously
• Strong analytical and documentation skills; able to explain risks and recommendations clearly to technical and non-technical stakeholders

Benefits

• Interesting professional and personal challenge
• Rewarding, meaningful work in a young, dynamic, international organization
• Full flexibility and ownership/accountability
• 25 days of holiday per year; 6 sick days per year
• Flexible working hours and working from home
• Possibility of a 13th salary after probation
• Meal vouchers
• Cafeteria/pension scheme
• MultiSport card
• Language courses
• Transportation allowance (10 CZK/calendar day)
• Relocation package for former MSF field employees changing regular domicile to work at the SITS Prague office
• Possibility for sabbatical leave/mission once per 3 years
• Free refreshment at the workplace
• Dog-friendly office
• Team buildings and family days