Cloud Engineer

The Cloud Engineer is responsible for designing, implementing, and managing cloud solutions based on Microsoft Azure.

This is a hands-on role serving as a key technical contributor to our cloud platform spanning Platform as a Service (PaaS) services, Azure Kubernetes Service (AKS), networking, and ensuring the scalability, reliability, and security of our Azure cloud infrastructure.

This role works closely with cross-functional teams including application development, security, and operations to build resilient cloud environments that meet organizational needs and compliance obligations including SOC 2 and HIPAA.

• Design and deploy Azure cloud solutions including virtual machines, virtual networks, storage accounts, databases, and PaaS services to meet business and technical objectives
• Configure and optimize Azure resources for performance, scalability, and cost-efficiency using automation tools, scripting languages, and infrastructure as code (IaC) techniques including Terraform and Bicep
• Manage Azure DevOps pipelines and CI/CD workflows to automate software delivery, infrastructure provisioning, and deployment activities

• Design and operate PaaS workloads using Azure App Service, Azure Functions, Azure SQL, Azure Service Bus, Azure Storage, and Event Hub
• Evaluate and onboard new PaaS offerings aligned with workload requirements, cost targets, and compliance obligations
• Manage Azure Key Vault, App Configuration, and Managed Identities for secrets and configuration lifecycle
• Implement and manage Azure governance policies, security controls, and compliance standards to ensure confidentiality, integrity, and availability of cloud resources

• Administer AKS clusters including node pool scaling, upgrades, and RBAC configuration
• Implement and maintain ingress controllers, network policies, workload identity, and pod security standards
• Integrate AKS with Azure Container Registry, Key Vault CSI Driver, External Secrets Operator, and monitoring tooling
• Collaborate with development teams on Helm chart packaging, GitOps patterns, and service mesh considerations

• Design and manage Azure virtual networks, subnets, NSGs, route tables, VNet peering, and Private Endpoints
• Configure and maintain Azure Firewall, Application Gateway, Azure Front Door, and VPN Gateway
• Implement and troubleshoot DNS architecture including Azure Private DNS Zones and hybrid DNS resolution
• Support hub-and-spoke or Virtual WAN topologies across production, staging, and development environments

• Apply zero-trust networking principles, least-privilege IAM, and conditional access policies across the Azure tenant
• Configure and tune Microsoft Defender for Cloud, Microsoft Sentinel integration, and Azure Security Center recommendations
• Support SOC 2 and HIPAA compliance obligations through evidence collection, control implementation, and audit readiness
• Participate in vulnerability management, patch lifecycle governance, and security incident response

• Build and maintain monitoring, alerting, and dashboards using Azure Monitor, Log Analytics, and Application Insights
• Monitor and troubleshoot Azure cloud environments, proactively identifying and resolving performance issues, availability disruptions, and security vulnerabilities
• Participate in cloud migration projects, workload migrations, and hybrid cloud integrations, ensuring seamless transitions and minimal disruption to business operations
• Document Azure cloud configurations, procedures, and troubleshooting steps, maintaining accurate records and knowledge base articles to facilitate knowledge sharing

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience or relevant industry certifications.
• 3+ years of experience in a cloud engineering role with demonstrated proficiency in implementing, designing, and managing Microsoft Azure solutions
• Deep understanding of Azure cloud services including Azure Virtual Machines, Azure Networking, Azure Storage, Azure Databases, Azure Security, and Azure DevOps
• Proficiency in Azure infrastructure as code tools including Terraform (required) and Bicep or ARM templates
• Demonstrated knowledge of cloud security best practices, identity and access management (IAM), encryption, network security, and compliance standards (HIPAA, SOC 2)
• Experience operating AKS or self-managed Kubernetes in production environments
• Solid Azure networking fundamentals including VNets, NSGs, Private Endpoints, DNS, and load balancing
• Familiarity with Azure Entra ID, RBAC, Managed Identities, and service principals
• Experience building CI/CD pipelines with Azure DevOps (or equivalent, e.g., GitLab CI)
• Scripting proficiency in Bash and/or Python for automation and tooling
• Strong communication and collaboration skills with the ability to interact effectively with cross-functional teams, stakeholders, and vendors

Nice to Have

• Healthcare, SaaS, or regulated industry experience
• Azure certifications such as AZ-104, AZ-305, AZ-500, AZ-700, or CKA/CKAD
• Experience with GitOps tooling such as Flux or ArgoCD
• Familiarity with policy-as-code tools including Checkov, OPA/Gatekeeper, and Azure Policy
• Exposure to secrets management platforms such as HashiCorp Vault, Azure Key Vault, and External Secrets Operator
• Experience with FinOps practices and Azure cost optimization tooling
• Familiarity with Windows Server, Active Directory, and hybrid identity scenarios

Office Ally is committed to fair and equitable compensation practices in alignment with pay transparency laws.

for this position may vary based on individual skills, experience, and location.

In addition to base pay, employees may be eligible for performance-based bonuses and a comprehensive benefits package, including medical, dental, and vision coverage, 401(k) with company match, paid time off, and other benefits.

Actual compensation will be determined considering the candidate’s qualifications, relevant experience, and internal equity.

At Office Ally, your work has a direct impact on healthcare providers and their ability to deliver exceptional care.

We’re driven by a mission to simplify healthcare administration, making it easier for providers to focus on what they do best—helping patients.

As an Office Ally employee, you’ll be at the heart of our efforts to deliver exceptional service and software solutions to our clients in the healthcare space.

Office Ally is an Equal Opportunity Employer and does not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any classification protected by federal, state, or local law.