Senior Cloud Operations Engineer

include comprehensive medical, vision, and dental coverage, flexible spending options, flexible PTO, life insurance, education support, a 401(k) plan, parental leave, and more.

We are seeking an experienced Cloud Operations Engineer (Azure) to design, implement, and operate secure, scalable, and highly available cloud infrastructure within Microsoft Azure.

This is a hands-on role focused on operational excellence—driving stability, performance, automation, cost optimization, security hardening, and resilient recovery strategies across a modern cloud platform.

In this role, you will be responsible for maintaining and continuously improving cloud environments that support enterprise applications, ensuring alignment with security, compliance, and operational best practices.

You will collaborate closely with engineering, security, and DevOps teams to ensure cloud services are deployed safely, monitored effectively, and enhanced continuously.

The ideal candidate brings a strong combination of Azure administration, architectural awareness, and DevOps integration, with deep expertise in identity, security, and automation.

You will play a key role in enabling rapid and reliable delivery through Azure DevOps and robust CI/CD pipelines while advancing the maturity and efficiency of the organization’s cloud operations.

• Administer and optimize Azure environments across IaaS and PaaS services, ensuring scalability, reliability, and performance.
• Deploy and manage Azure services including computer, networking, storage, and platform services.
• Monitor system health, availability, and performance using Azure-native and third party tools.
• Provide support for production systems, including incident response and root cause analysis.
• Maintain SLAs and ensure systems meet uptime and resiliency requirements.
• Own operational lifecycle management for Azure app registrations, enterprise applications, service principals, client secrets, certificates, Key Vault integrations, and related monitoring/alerting to prevent expiration-related outages.
• Support Azure networking resources including VNets, peering, private endpoints, private DNS zones, VPN connectivity, NSGs, routing, and firewall/security integration.
• Deploy and operate Azure SQL Database / Azure SQL Managed Instance services, including secure connectivity, backups, performance monitoring, availability options, and recovery validation.
• Create and maintain technical documentation, architecture diagrams, operational runbooks, and support handoff materials for Azure, identity, automation, and application platform services.

• Collaborate with application teams to design cloud-native and cloud-optimized solutions.
• Leverage Azure PaaS services such as:

• Azure Functions

• Ensure applications are designed for high availability, fault tolerance, and scalability.
• Implement patterns such as microservices, event-driven architecture, and API-first integration.

• Partner with development teams to implement and manage CI/CD pipelines using Azure DevOps and enforce DevOps best practices.
• Support infrastructure provisioning.
• Automate deployment, configuration, and scaling processes.
• Ensure consistent environments across development, staging, and production.

• Integrate and manage identity across Azure Entra ID and Okta.
• Design and maintain SSO, MFA, and federation between platforms.
• Implement role-based access control (RBAC) and least privilege principles.
• Manage user access provisioning, deprovisioning, and periodic access reviews.
• Support identity lifecycle governance and audit readiness.

• Implement and maintain a security-first architecture, aligned with Zero Trust principles.
• Enforce policies for endpoint, network, and cloud workload protection.
• Utilize tools such as:

• Netskope
• Azure Policies
• Conditional Access
• Support regulatory compliance initiatives (e.g., SEC, NIST-aligned controls).
• Participate in security assessments, vulnerability management, and incident response.

• Design and maintain highly available and fault-tolerant systems across regions and availability zones.
• Implement backup, disaster recovery, and business continuity strategies.
• Validate recovery objectives (RTO/RPO) through regular testing.
• Ensure redundancy across critical systems and services.

• Support the deployment and operationalization of AI solutions including Copilot technologies, Azure OpenAI, and other modern LLM options (e.g., Claude) where appropriate.
• Implement secure-by-design AI patterns: access controls, data boundary protections, logging, monitoring, cost governance, and safe experimentation environments.

• Monitor and optimize Azure spending through:
• Resource right-sizing
• Reserved Instances and Savings Plans
• Auto-scaling configurations
• Ongoing audits of existing deployments
• Implement tagging and cost allocation strategies.
• Provide regular reporting and recommendations to leadership.
• Balance performance, reliability, and cost efficiency.

• Integrate cloud services with enterprise platforms and third-party systems.
• Support API-based integrations and hybrid connectivity.
• Collaborate with vendors and internal teams to deliver secure and scalable solutions.

• 4–7+ years of experience in IT infrastructure, cloud administration, or systems engineering.
• Extensive hands-on experience with Microsoft Azure (IaaS, PaaS, networking, identity).
• Experience with Azure DevOps and CI/CD pipelines.
• Strong knowledge of identity management (Entra ID / Okta integration).
• Experience with scripting/automation (PowerShell, Python, or similar).
• Solid understanding of networking concepts (DNS, TCP/IP, firewalls, VPNs).

• Azure certifications (Administrator, Security Engineer, or DevOps Engineer).
• Experience implementing Zero Trust architecture.
• Familiarity with Infrastructure as Code.
• Experience supporting regulated environments (financial services, healthcare, etc.).
• Knowledge of monitoring and observability tools (Azure Monitor, LogicMonitor).
• Bachelor’s degree in information technology related field.

• Strong analytical and problem-solving skills.
• Effective cross-functional collaboration and communication.
• Ability to translate business requirements into technical solutions.
• Detail-oriented with a focus on security and compliance.
• Continuous improvement mindset with a focus on automation and efficiency.

• Secure, stable, and highly available Azure environment.
• Efficient, automated deployment pipelines.
• Well-governed identity and access management.
• Optimized cloud spending aligned with business needs.
• Strong alignment between infrastructure, security, and application teams.

Pay Transparency: Pathstone’s expected starting base compensation range for the position as of the time of this posting is $120,000 - $140,000 per year.

The actual base compensation selected for this role will be set based on a variety of factors, including (but not limited to) experience, education, specialty and training.

The successful candidate(s) may also be eligible for a discretionary bonus award.

Visa Sponsorship: Please note, we are unable to provide visa sponsorship for the position offered.

Accordingly, we are unable to hire individuals who require, or will require, employment visa sponsorship either now or in the future.

Pathstone is proud to be an equal opportunity employer.

As you explore opportunities, know that Pathstone communicates with candidates exclusively through an @pathstone.com email address.

We do not make unsolicited job offers, and we will never ask for personal or financial information through email or web forms.

If you receive outreach that appears to be from Pathstone but originates from a different domain, please disregard it.

#LI-Hybrid