Role Description This role is an opportunity to shape secure cloud infrastructure patterns in a high-impact consulting environment. As a Senior Cloud Infrastructure Engineer - Azure, you will help define and strengthen the architectural foundations that support complex client environments, partnering closely with technical leadership and contributing to infrastructure decisions that emphasize security, resilience, and long-term maintainability. Responsibilities - Maintain, refactor, and scale hardened Azure Landing Zones ensuring explicit logical segregation between control planes and data planes. - Govern infrastructure code quality by owning and leading comprehensive Terraform Pull Request (PR) reviews. - Implement zero-trust network perimeter controls, completely removing public service exposure. - Eliminate the use of static secrets and keys by establishing identity-driven authentication layers across all environments. - Collaborate with core technical stakeholders, including the CTO and Geo Practice Lead, to deliver secure infrastructure blueprints. Qualifications - Expert-level mastery of infrastructure decoupling strategies (separating data processing workloads from management states). - Strong operational discipline in agile environments: active participation in sprint execution, backlog hygiene, and structured technical documentation. Specific Tools & Technologies - Infrastructure as Code: Advanced Terraform exclusively (expertise in state management, state recovery, complex nesting, and reusable enterprise module design). - Identity & Cryptography: Microsoft Entra ID, Azure Key Vault (strictly leveraging Azure RBAC authorization models), OpenID Connect (OIDC) federated credentials. - Networking & Boundaries: Azure Private Link, Private Endpoints, Split-Horizon Private DNS Zone linking, and backend subnet isolation routing. - CI/CD Orchestration: Secure GitHub Actions workflow engineering utilizing passwordless authentication identities. - Workloads: Private network infrastructure hosting for analytical data environments (such as network-isolated Azure Databricks configurations) and secure model ingestion layers. Certifications - Required: Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Required: HashiCorp Certified: Terraform Associate or Advanced - Preferred: Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate certification (SC-500) Preferred Skills - Familiarity with financial or insurance sector compliance frameworks and MEC reference architecture patterns. - Practical alignment with cloud economics and fundamental infrastructure sizing optimizations.

• Create realistic cloud and platform engineering challenges. • Build reproducible, containerized infrastructure environments. • Design scenarios covering networking, IAM, queues, storage, scaling, and reliability. • Define measurable requirements for configuration, topology, and runtime behaviour. • Develop automated integration, load, security, failure, deployment, and recovery tests. • Create accurate reference solutions and intentionally defective variants. • Debug environments and resolve infrastructure or test issues. • Document architecture decisions, expected outcomes, and validation logic. • Review tasks and solutions created by other technical experts.

• Designing, implementing, and managing cutting-edge network and infrastructure solutions • Providing support to development teams • Ensuring the smooth operation of the company's geo-distributed infrastructure • Maintenance and configuration of network equipment, bare metal servers, NAS • Maintenance and configuration of virtualization system (VMWare) • Administering multiple Linux servers • Monitoring the status of services and prompt resolution of emerging problems • Automating administrative tasks • Participating in the development and improvement of infrastructure • Interacting with developers, database administrators, DevOps engineers, architects

• Own our cloud infrastructure across AWS and GCP — Kubernetes clusters, networking, databases (Aurora PostgreSQL, Redis, MongoDB Atlas), Cloudflare, and our CI/CD pipeline. • Scale single-tenant deployments from a handful to many — each with distinct data retention, geographic, monitoring, and compliance requirements. Make a private cloud deployment a repeatable, low-overhead operation. • Build our observability and incident response practice — proactive monitoring, alerting, SLA tracking, and structured post-mortems that make the whole team better at diagnosing and resolving issues. • Drive compliance and security operations — ensure we follow through on the policies we've written (SOC 2, NIST AI framework, EU Cyber Resilience). Own disaster recovery exercises, database restoration drills, and security event monitoring (SIEM). • Manage infrastructure cost and capacity — make smart decisions about where we run workloads (AWS, CoreWeave, Parasail), optimize spend, and plan capacity as usage grows. • Improve developer experience — CI/CD pipeline performance, preview environments, local development tooling, and deployment confidence. • Contribute to backend systems where infrastructure and application intersect — circuit breakers, inference routing, data connector infrastructure for enterprise customers bringing their own data.