Lead Cloud Engineer

• Infrastructure-as-Code (IaC) Delivery: Design, author, and maintain reusable Terraform modules and deployment pipelines for the Azure Enterprise Data environment, including core networking, security controls, resource groups, and service integrations

• Three-Plane Architecture Setup: Implement and manage the three-plane architecture (Control Plane, Data Plane, and Target Stores) across designated Azure subscriptions and resource groups supporting high-assurance (stage/prod) and low-assurance (dev/test) environments

• Hybrid Multi-Cloud Networking & Security: Configure secure private networking and connectivity between Azure and the Google Cloud Advanced Data Lake (ADL)—reaching BigQuery, Cloud Storage, FHIR Store, and DICOM Store via private endpoints without public internet exposure

• Platform Services & Storage Provisioning: Deploy and configure Azure services including Azure Kubernetes Service (AKS), Azure Database for PostgreSQL flexible server (with pgvector ), Blob Storage, Key Vault, Azure Container Registry (ACR), and Azure Artifacts

• Identity & Access Management (IAM): Integrate Entra ID sign-in enforcing role-based access control (RBAC), least-privilege permissions, and SailPoint-governed groups, alongside personal service accounts and JIT elevation for privileged access

• Observability & Compliance: Configure centralized logging and monitoring via Azure Monitor, ensuring all telemetry and audit logs are strictly configured to exclude Protected Health Information (PHI)
• Cloud Platforms: Expert-level experience with Microsoft Azure enterprise data platforms, hybrid multi-cloud architectures, and integration points with Google Cloud and Microsoft Fabric

• Containerization & Orchestration: Proven experience deploying and operating Apache Airflow, Milvus, Neo4j operators, and custom workloads on Azure Kubernetes Service (AKS), including GPU node pool configuration

• Automation & Tooling: Deep proficiency in Infrastructure-as-Code (Terraform, Spacelift/Terraform Enterprise) and CI/CD pipeline implementation via Azure DevOps and GitHub Enterprise

• Healthcare Compliance & Security: Strong working knowledge of HIPAA/PHI compliance controls, data residency restrictions (US-based storage/processing), encryption standards (TLS 1.2+, at-rest key management), and secure SDLC practices

This position may be hired at multiple levels. Final leveling is determined during the interview process based on a candidate's experience, skills, and interview outcomes, and the applicable salary range will align with the final level assigned.

Compensation is determined based on factors including experience, expertise, interview performance, and geographic location, where applicable.