Cloud Engineer

Job Overview

We have an exciting opportunity for a Cloud Engineer to join our team at our Milwaukee (South Harbor District) or Chicago Headquarters (near O'Hare). Candidates must live within a commutable distance to one of these locations. We work onsite four days per week with one flexible day, creating the right balance between in-person collaboration and the flexibility professionals value. At Komatsu, we believe the best ideas come from working together, building relationships, driving innovation, and making an impact every day.

This is a cloud engineering role responsible for designing, implementing, automating, and operating modern cloud platforms, services and applications. The position requires hands‑on expertise in cloud architecture, Infrastructure as Code (Bicep), Git Hub/ADO CI/CD pipelines, and secure zero‑downtime deployments across Azure PaaS and containerized environments. The engineer will design and manage solutions using AKS, ACA, App Service Environments, Azure Front Door, and Azure SQL/Cosmos DB.

The role emphasizes Zero Trust security, governance, observability, cost optimization, and cost cleanup with clear reporting of measurable results. Working closely with development teams, the engineer will support microservices design, optimize cloud‑native architectures, and leverage AI‑driven automation to enable scalable, secure, and efficient cloud operations.

• Architect, deploy, and operate end-to-end Azure cloud solutions leveraging services such as App Service Environments, Function Apps, App Services, Azure Kubernetes Service (AKS), Azure Container Apps (ACA), Azure Front Door, Application Gateway, API Management, and Key Vault, ensuring secure, scalable, and resilient designs.
• Lead hands‑on deployment and configuration of core Azure data and application services, including Cosmos DB, Azure SQL, Azure Storage, and Application Insights, with automated provisioning, for high availability.
• Implement Infrastructure as Code (IaC) using Bicep, seamlessly integrated into Git Hub Actions pipelines, to ensure consistent, auditable, and repeatable provisioning of infrastructure across all environments.
• Design and manage Docker and Kubernetes-based workloads, building containerized microservices, managing deployment manifests, Helm charts, and ingress configurations for AKS and ACA.
• Build and maintain fully automated CI/CD pipelines using Git Hub Actions to support blue‑green and canary deployments, automated testing, rollback strategies, and environment promotion workflows.
• Drive Azure Dev Ops to Git Hub migration initiatives, modernizing CI/CD pipelines, defining reusable workflow templates, and aligning all deployment automation with enterprise governance and security standards.
• Architect and enforce zero‑trust and zero‑downtime deployment strategies, integrating private endpoints, managed identities, and advanced networking configurations for secure and continuous availability.
• Collaborate closely with developers, architects, security engineers, and vendors to ensure that all solutions are cloud‑optimized, compliant, and aligned with Dev Sec Ops  best practices.
• Guide development teams on designing and deploying Azure‑native, containerized applications, ensuring adherence to architectural principles, performance tuning, and cost efficiency.
• Implement and manage observability and health monitoring using Dynatrace, Azure Monitor, Application Insights, and Log Analytics, enabling proactive detection, diagnostics, and performance optimization.
• Integrate Wiz into CI/CD pipelines for code‑to‑cloud security posture management, vulnerability detection, and compliance validation during build and runtime.
• Optimize cloud resources through performance tuning, auto‑scaling, reserved capacity, and policy‑driven cost governance, ensuring efficient utilization and budget alignment.
• Maintain detailed architecture documentation, Bicep templates, runbooks, and operational guides to enable repeatability, transparency, and business continuity.
• Lead cloud modernization and automation initiatives, driving Dev Ops maturity through standardized pipelines, IaC, security automation, and…