Senior Cloud Infrastructure Engineer - Azure

OZ Digital LLC is a technology consulting firm focused on helping clients improve operations and decision-making through intelligent automation, data analytics, AI, and related digital solutions. Working across the Information Technology and Services space, the company partners with organizations that need secure, scalable digital foundations to support modern platforms and business outcomes.

This role is an opportunity to shape secure cloud infrastructure patterns in a high-impact consulting environment. As a Senior Cloud Infrastructure Engineer - Azure, you will help define and strengthen the architectural foundations that support complex client environments, partnering closely with technical leadership and contributing to infrastructure decisions that emphasize security, resilience, and long-term maintainability.

Responsibilities

• Maintain, refactor, and scale hardened Azure Landing Zones ensuring explicit logical segregation between control planes and data planes.
• Govern infrastructure code quality by owning and leading comprehensive Terraform Pull Request (PR) reviews.
• Implement zero-trust network perimeter controls, completely removing public service exposure.
• Eliminate the use of static secrets and keys by establishing identity-driven authentication layers across all environments.
• Collaborate with core technical stakeholders, including the CTO and Geo Practice Lead, to deliver secure infrastructure blueprints.

Requirements

Qualifications & Skill Set

• Expert-level mastery of infrastructure decoupling strategies (separating data processing workloads from management states).
• Strong operational discipline in agile environments: active participation in sprint execution, backlog hygiene, and structured technical documentation.

Specific Tools & Technologies

• Infrastructure as Code: Advanced Terraform exclusively (expertise in state management, state recovery, complex nesting, and reusable enterprise module design).
• Identity & Cryptography: Microsoft Entra ID, Azure Key Vault (strictly leveraging Azure RBAC authorization models), OpenID Connect (OIDC) federated credentials.
• Networking & Boundaries: Azure Private Link, Private Endpoints, Split-Horizon Private DNS Zone linking, and backend subnet isolation routing.
• CI/CD Orchestration: Secure GitHub Actions workflow engineering utilizing passwordless authentication identities.
• Workloads: Private network infrastructure hosting for analytical data environments (such as network-isolated Azure Databricks configurations) and secure model ingestion layers.

Certifications

• Required: Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Required: HashiCorp Certified: Terraform Associate or Advanced
• Preferred: Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate certification (SC-500)

Preferred Skills

• Familiarity with financial or insurance sector compliance frameworks and MEC reference architecture patterns.
• Practical alignment with cloud economics and fundamental infrastructure sizing optimizations.