Cloud Governance Engineer Job at Openkyber, New York, NY

QkJXOEMxV3dDc3RHUUw4UXUvM3lCMlpYRHc9PQ==
  • Openkyber
  • New York, NY

Job Description

Position Summary

The Azure Cloud Engineer will design, build, and support cloud infrastructure environments in Microsoft Azure, leveraging Infrastructure as Code (IaC) using Terraform Cloud/Enterprise.

This role is responsible for developing reusable Terraform modules, automating deployments, implementing governance and security controls, and supporting application and data platform integrations.

The engineer will work closely with the Infrastructure, Security, Application, and Data Engineering teams to ensure Azure environments are secure, scalable, and compliant, while improving operational efficiency through automation.



Responsibilities:
  • Design, configure, and deploy Azure infrastructure (Compute, Network, Storage, PaaS) using Terraform.
  • Develop and maintain modular Terraform code with state management in Terraform Cloud or Azure Storage.
  • Implement CI/CD pipelines (GitHub Actions or Azure DevOps) for infrastructure deployments using OIDC authentication.
  • Build and manage Azure services including:
    • Networking: VNets, Subnets, Firewalls, Load Balancers, Private Endpoints, VPN/ExpressRoute
    • Compute: Virtual Machines, App Services, Function Apps, AKS
    • Storage: Blob, File, and ADLS Gen2
    • Data Platform: Azure Data Factory, Databricks, Synapse
    • Security: Key Vault, Defender for Cloud, RBAC, Managed Identities
  • Implement Azure governance standards including naming conventions, tagging, policies, and monitoring.
  • Manage and optimize cost, performance, and availability across environments.
  • Participate in disaster recovery planning, including defining and validating RTO/RPO.
  • Develop and maintain infrastructure documentation, runbooks, and change records.
  • Collaborate with application and data teams to support environment provisioning and deployments.
  • Support patching cadence and compliance reporting using Azure Update Manager and automation.


Minimum Qualifications:
  • Azure Cloud Infrastructure (compute, network, storage, PaaS) Required, 5+ years of designing and implementing Azure environments including VNets, App Services, and Storage solutions.
  • Infrastructure as Code (Terraform) Required, 4+ years of developing Terraform modules, managing state files, and automating deployments via Terraform Cloud/Enterprise.
  • Azure Networking (VNets, Firewalls, Load Balancers, Private Endpoints) Required, 3+ years of hands-on configuration and troubleshooting of Azure networking.
  • Azure Data Platform (Data Factory, Databricks, Synapse) Desired, 2+ years of deploying and managing Azure data services using Terraform or manual provisioning.
  • Azure Key Vault and Security Integration Required, 3+ years of managing secrets, keys, and certificates for application and infrastructure workloads.
  • CI/CD Automation (GitHub Actions or Azure DevOps) Required, 3+ years of building and maintaining infrastructure pipelines with OIDC authentication.
  • Azure Governance and Compliance (Policy, Blueprints, RBAC) Required, 3+ years of implementing policies, tagging, and access control for compliance and security.
  • Scripting (PowerShell, Python, or Bash) Required, 3+ years of writing scripts for automation, configuration, and monitoring tasks.
  • Monitoring and Logging (Azure Monitor, Log Analytics, Application Insights) Required, 3+ years of implementing monitoring solutions for performance and availability tracking.
  • Azure Cost Optimization and Management Desired, 2+ years of experience analyzing usage patterns and implementing cost-control mechanisms.
  • Disaster Recovery / Business Continuity Desired, 2+ years of setting up DR environments and defining RTO/RPO objectives.
  • Linux and Windows Administration Desired, 3+ years of managing OS-level configuration, patching, and hardening in Azure environments.
  • ITIL/Service Management Process (Incident, Change, Problem) Desired, 2+ years of working within structured change and incident management processes.
  • Azure Certifications (AZ-104, AZ-305, or Terraform Associate) Desired professional certifications validating Azure and IaC expertise.


Preferred Qualifications:
  • Experience with multi-subscription Azure architecture and landing zone design.
  • Familiarity with IaC testing and policy enforcement tools (Terratest, Checkov, Sentinel).
  • Experience with Azure Containers (AKS, Container Instances) and integrating security best practices.
  • Experience collaborating in Agile/Scrum environments.


Soft Skills:
  • Strong communication and documentation abilities.
  • Analytical mindset with a focus on automation and reliability.
  • Effective collaborator with cross-functional teams (Dev, Sec, Ops).
  • Self-driven, proactive, and comfortable in dynamic project environments.


Education and Certifications:
  • Bachelor's degree in Computer Science, Engineering, or related field (or equivalent work experience).
  • Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure Solutions Architect Expert (AZ-305) preferred.
  • HashiCorp Certified: Terraform Associate strongly desired.


Assignment Overview:
  • Engagement Type: Contract (W2 or C2C through vendor)
  • Duration: 12+ months, with option to extend
  • Work Schedule: Full-time, Monday Friday, 8:00 AM 4:30 PM CST
  • Work Location: Hybrid St. Paul, MN (onsite up to 2 days/week)

Job Tags

Full time, Contract work, Work experience placement, Monday to Friday, 2 days per week,

Similar Jobs

California Correctional Health Care Services

REGISTERED NURSE - PELICAN BAY STATE PRISON Job at California Correctional Health Care Services

Job Description and Duties Effective July 1, 2025, in accordance with the applicable Memorandum of Understanding, the Personal Leave Program 2025 (PLP 2025) was implemented. PLP 2025 requires each full-time employee in Bargaining Unit 17 , and related Excluded, Exempt...

Bluestorm Recruitment by Dazzle

Onboarding Specialist Job at Bluestorm Recruitment by Dazzle

 ...Experience utilizing/navigating within an Applicant Tracking System is strongly preferred Excellent soft skills is a must - Excel / Smartsheet experience is preferred (we operate in a paperless environment) Nice-To-Haves Taleo experience is preferred Coming from a... 

University of the Pacific

Community Service Officer Job at University of the Pacific

 ...Primary Purpose The Community Service Officer is responsible for supporting activities that maintain a safe and secure community environment and to promote a sense of confidence and trust in the Department of Public Safety and throughout the University Community. They... 

T. Parker Host

Boarding Agent, Maritime Ship Agent Job at T. Parker Host

 ...to a century ago in 1923, T. Parker Host quickly developed a strong reputation for offering exceptional service and solutions as a ship agency. HOST is the largest dry bulk agent in the United States and handles nearly 4,000 vessels annually, including dry bulk, breakbulk... 

Infinitive Inc

Critical Facility Technician - UPS Job at Infinitive Inc

 ...Critical Facility Technician - UPS Job Overview: Oracle is seeking a Critical Facility Technician Building Engineer...  ...and related infrastructure. Operate on a rotating shift schedule, including potential night and holiday shifts, as required to support 24/7 critical...