Senior Cloud Network Engineer

Senior Cloud Network Engineer

We are seeking a highly skilled Senior Cloud Platform Engineer (Azure/Terraform) to support the design, integration, and automation of enterprise‑scale Azure infrastructure. This role will focus on orchestrating existing platform components into cohesive, reusable modules while enabling secure, scalable, and automated platform operations aligned with Azure best practices.

The successful candidate will bring deep expertise in Azure networking, infrastructure‑as‑code, and modern authentication patterns, and will play a key role in advancing platform maturity through automation and standardization.

The ideal candidate will collaborate closely with stakeholders to ensure successful implementation and integration of network designs.

The successful candidate will be confident in engaging with internal and external stakeholders, including vendors, to translate business requirements into clear, actionable technical strategies. A strong foundation in enterprise networking technologies is essential, along with a commitment to operational excellence, continuous improvement, and delivering reliable, scalable solutions.

• Conduct upfront discovery to assess existing platform builds and validate remaining scope within MVP1 boundaries
• Identify gaps and translate findings into a structured backlog for future MVP releases (MVP
• x)
  Refine and maintain a prioritized backlog for in‑scope platform modules

• Design and orchestrate existing infrastructure components into scalable, reusable Azure platform modules
• Integrate and operationalize core platform layers, including:
  • Azure Virtual Network Manager
  • Azure Hub Layer
  • Azure Secure Transit Layer
  • Network and Connectivity services
  • Data Link integrations
• Ensure alignment with Azure Well‑Architected Framework and best practices

• Develop and maintain Terraform‑based platform modules for:
  • Subscription provisioning
  • Azure RBAC
  • Resource Providers
  • Resource Groups
  • Key Vault
  • Boot Diagnostic Storage Accounts (BDSA)
  • ADB Init Script Storage Accounts
• Enable full lifecycle automation of foundational Azure components required for subscription onboarding

• Implement contemporary authentication patterns to support secure, automated pipeline execution
• Eliminate reliance on static credentials and manual IAM processes
• Establish and standardize:
  • Azure OIDC integration for pipeline authentication (Azure 2.0 readiness)
  • Secure patterns for non‑OIDC providers using Terraform variable sets and centralized credential management
• Enable automated Terraform workspace provisioning with appropriate IAM workflows

• 7–10+ years of experience in cloud infrastructure engineering, with strong Azure focus
• Proven experience building enterprise‑scale platforms using Terraform (IaC)
• Deep knowledge of Azure networking and connectivity services
• Hands‑on experience with subscription provisioning and governance frameworks
• Strong understanding of Azure RBAC, IAM, and security best practices
• Experience with CI/CD pipelines and infrastructure automation

• Microsoft Azure (networking, identity, platform services)
• Terraform (advanced module design and automation)
• Azure Dev Ops or similar CI/CD tooling
• Authentication protocols (OIDC, service principals, managed identities)
• Infrastructure orchestration and modular platform design

• Experience designing multi‑region or enterprise fr zone architectures
• Familiarity with Azure Virtual Network Manager and advanced networking patterns
• Exposure to financial services or regulated environments
• Strong troubleshooting and performance optimization skills