Lead Cloud Engineer (Azure)

About the job:
Infrastructure-as-Code (IaC) Delivery: Design, author, and maintain reusable Terraform modules and deployment pipelines for the Azure Enterprise Data environment, including core networking, security controls, resource groups, and service integrations Three-Plane Architecture Setup: Implement and manage the three-plane architecture (Control Plane, Data Plane, and Target Stores) across designated Azure subscriptions and resource groups supporting high-assurance (stage/prod) and low-assurance (dev/test) environments Hybrid Multi-Cloud Networking & Security: Configure secure private networking and connectivity between Azure and the Google Cloud Advanced Data Lake (ADL)—reaching BigQuery, Cloud Storage, FHIR Store, and DICOM Store via private endpoints without public internet exposure Platform Services & Storage Provisioning: Deploy and configure Azure services including Azure Kubernetes Service (AKS), Azure Database for PostgreSQL flexible server (with pgvector ), Blob Storage, Key Vault, Azure Container Registry (ACR), and Azure Artifacts Identity & Access Management (IAM): Integrate Entra ID sign-in enforcing role-based access control (RBAC), least-privilege permissions, and SailPoint-governed groups, alongside personal service accounts and JIT elevation for privileged access Observability & Compliance: Configure centralized logging and monitoring via Azure Monitor, ensuring all telemetry and audit logs are strictly configured to exclude Protected Health Information (PHI)

About you:
Cloud Platforms: Expert-level experience with Microsoft Azure enterprise data platforms, hybrid multi-cloud architectures, and integration points with Google Cloud and Microsoft Fabric Containerization & Orchestration: Proven experience deploying and operating Apache Airflow, Milvus, Neo4j operators, and custom workloads on Azure Kubernetes Service (AKS), including GPU node pool configuration Automation & Tooling: Deep proficiency in Infrastructure-as-Code (Terraform, Spacelift/Terraform Enterprise) and CI/CD pipeline implementation via Azure DevOps and GitHub Enterprise Healthcare Compliance & Security: Strong working knowledge of HIPAA/PHI compliance controls, data residency restrictions (US-based storage/processing), encryption standards (TLS 1.2+, at-rest key management), and secure SDLC practices