Lead Cloud Engineer

Job Description Summary

The Lead Cloud Engineer is a senior, hands‑on technical role responsible for designing, implementing, and managing cloud‑based systems across Azure and AWS platforms. This role combines hands‑on technical expertise with team leadership, focusing on cloud‑native architecture, automation, security, and operational excellence to support Western Growers’ digital transformation goals, while providing leadership, mentorship, and guidance to other engineers. The incumbent remains deeply involved in day‑to‑day engineering work, driving cloud adoption, infrastructure modernization, and security best practices.

The role partners closely with IT leadership, application teams, and vendors to ensure cloud solutions align with business and technical requirements.

$ - $ with a rich benefits package that includes profit‑sharing.

• Minimum three (3) years of hands‑on experience with Microsoft Azure and/or AWS in production environments. Expert level knowledge preferred.
• Microsoft Certified:
  Azure Administrator Associate or Azure Solutions Architect Expert (Preferred).
• AWS Certified Solutions Architect or AWS Certified Sys Ops Administrator (Preferred).
• Expert-level knowledge of Microsoft Azure services including:
  • Azure Virtual Machines, Virtual Networks, and hybrid connectivity (VPN/Express Route)
  • Azure Active Directory, Entra , Conditional Access policies
  • Azure Storage, SQL Database, and data platform services
  • Azure Monitor, Log Analytics, and Application Insights
  • Azure Dev Ops or Git Hub Actions for CI/CD pipelines
• Strong working knowledge of AWS services including:
  • EC2, VPC, S3, RDS, Lambda
  • IAM, Security Groups, and network ACLs
  • Cloud Watch, Cloud Trail, and AWS Config
  • AWS Cloud Formation or Terraform for infrastructure as code
• Deep technical knowledge of:
  • Infrastructure as Code (Terraform, ARM templates, Cloud Formation)
  • Container technologies (Docker, Kubernetes, AKS, EKS)
  • Microsoft 365 administration and hybrid identity (Azure AD Connect, SSO)
  • Power Shell, Python, or Bash scripting for automation
  • Networking fundamentals including DNS, VPN, firewall rules, and routing
  • Security best practices including zero‑trust architecture, encryption, and compliance frameworks
• Must be available for after‑hours maintenance windows, emergencies, and on‑call rotation.
• Ability to work independently while maintaining collaborative relationships across the organization.
• Additional relevant certifications in security, Dev Ops, or cloud platforms.

• Design, implement, and manage cloud infrastructure across Azure and AWS platforms aligned with business requirements and security standards.
• Lead cloud migration initiatives, including workload assessment, migration planning, and execution for applications and data.
• Architect hybrid cloud solutions integrating on‑premises systems with cloud services.
• Implement and maintain infrastructure as code practices using Terraform, ARM templates, or Cloud Formation.
• Optimize cloud resource utilization and costs through rightsizing, reserved instances, and automation.
• Establish and maintain disaster recovery and business continuity capabilities in cloud environments.
• Ensure high availability, resiliency, and optimal performance of all cloud‑based systems and services.
• Maintain backup and recovery procedures for all critical cloud workloads.

Oversee Microsoft 365 tenant administration, including Exchange Online, SharePoint, Teams, and One Drive.

• Manage Azure Active Directory/Entra , including user provisioning, group management, and conditional access policies.
• Implement and maintain hybrid identity solutions (Azure AD Connect, SSO, MFA).
• Establish and enforce identity governance and privileged access management.

• Implement cloud security best practices including network segmentation, encryption at rest and in transit, and access controls.
• Collaborate on security strategy, threat response, and risk mitigation.
• Design and implement security‑first cloud architectures that align with organizational risk tolerance and industry best practices.
• Embed security controls into…