Azure Cloud Engineer II

Cleveland Clinic is seeking an Azure Cloud Engineer II to implement, administer, and monitor cloud solutions aligned with enterprise architecture. The role supports cloud adoption, infrastructure automation, governance, security, and reliable operations across the division.

Responsibilities:

• Collaborate with the Cloud Center of Excellence to develop and implement cloud solutions aligned with organizational and divisional goals
• Provide hands-on implementation and support of cloud solutions consistent with enterprise architecture standards
• Design, deploy, and manage cloud infrastructure and systems to optimize performance, scalability, security, availability, and reliability
• Design, deploy, and support Azure infrastructure, including Compute Engine, networking, and storage services
• Build and maintain cloud landing zones and cloud operating models to support enterprise cloud adoption
• Develop automation scripts, templates, and frameworks to streamline infrastructure provisioning, configuration, deployment, and operations
• Apply Infrastructure as Code (IaC) and platform automation tools, including Azure Arc, Ansible, Chef, Puppet, Salt, and Terraform
• Monitor cloud environments and system performance, analyze cost and performance metrics, troubleshoot infrastructure incidents, and implement enhancements to improve operational reliability
• Apply design principles centered on simplicity, consistency, reusability, and standardization across the division
• Implement the division’s cloud vision and strategy in collaboration with the ITD Architecture team, ensuring progressive, integrated, and sustainable solutions
• Provide subject matter expertise within assigned areas of responsibility, developing innovative and tailored solutions to address evolving technical challenges
• Collaborate with engineers and IT architects across the division to ensure a cohesive and consistent approach to cloud architecture
• Support frameworks and processes that facilitate the transition of products from development through sustainable production deployment
• Engage proactively with key stakeholders, including division leaders and external partners, to develop and implement sustainable architectural solutions
• Evaluate emerging cloud technologies, tools, and methodologies and lead efforts to support their adoption when appropriate
• Perform hands-on implementation and development activities, including prototyping and coding, as required
• Evaluate multi-cloud capabilities and maintain a catalog of cloud offerings optimized for internal enterprise use
• Maintain awareness of emerging IT advancements and position the organization to effectively leverage innovative technologies and practices
• Support cloud governance, security, and compliance initiatives and ensure infrastructure aligns with established controls and standards
• Assist with cloud migrations and workload onboarding, ensuring solutions are properly integrated into the enterprise environment
• Support AI/ML and data platform initiatives through the implementation and optimization of cloud infrastructure and services
• Implement cloud automation, standardization, and cost optimization practices to improve operational efficiency and resource utilization
• Maintain operational runbooks, technical documentation, and other resources necessary to support cloud operations

Requirements:

• Bachelor's degree in computer science or related discipline
• Additional experience or relevant certifications may offset some or all of education requirements
• Five years of experience working in areas of computer systems and Infrastructure
• Two years of experience specializing in cloud engineering
• Demonstrated skills in technical judgement with ability to guide decisions across systems, scale, performance, security, fault tolerance, etc
• Experience with and significant knowledge of at least one cloud platform
• Experience working within small to medium sized cloud engineering teams
• Ability to work across organizations and multiple stakeholders
• Interested and curious about the domain
• For Information Technology Division caregivers, ITIL Foundations certification
• Microsoft Azure administration and architecture experience
• Experience with Azure Virtual Networks, Load Balancers, ExpressRoute
• Azure Kubernetes Service (AKS) experience
• Microsoft Entra ID (Azure AD) experience
• Azure Security Center / Defender for Cloud experience
• Azure Monitor, Log Analytics experience
• Terraform, Bicep, Ansible experience
• PowerShell and scripting experience
• Preferred Certifications for Azure are Azure Administrator Associate (AZ-104), Azure Solutions Architect Expert (AZ-305), Azure Security Engineer (AZ-500) or Terraform Associate
• Five+ years of dedicated engineering experience managing and operating enterprise-scale infrastructure natively within Microsoft Azure in a remote or distributed team environment
• Strong hands-on experience with Azure VMs, VNets, Storage, Azure AD/Entra ID, App Services, Functions, Azure Kubernetes Service (AKS), and PaaS databases
• Ability to design secure, scalable, and cost-efficient Azure architecture across Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and serverless environments
• Advanced proficiency with Terraform as the primary Infrastructure as Code (IaC) tool, including designing and reusing complex Terraform modules, managing remote state backends, and resolving out-of-band configuration drift
• Strong knowledge of Azure networking, including VNets, subnets, Network Security Groups (NSGs), routing, Azure Firewall, Application Gateway, VPN/ExpressRoute, and private endpoints
• Hands-on experience with container technologies, including Docker and Azure Kubernetes Service (AKS), with a strong understanding of cloud-native networking
• Experience building and maintaining automated CI/CD pipelines using Azure DevOps, GitHub Actions, or GitLab CI
• Advanced scripting and automation skills using PowerShell, Azure CLI, Bash, or Python
• Demonstrated experience implementing Azure security and governance solutions, including Azure Key Vault, private endpoints, custom Azure Policy rules, Azure identity, role-based access control (RBAC), Conditional Access, Privileged Identity Management (PIM), encryption, and cloud governance frameworks
• Experience with monitoring and observability tools, including Azure Monitor, Log Analytics, Application Insights, Prometheus, or Grafana
• Excellent asynchronous communication and documentation skills, with the ability to collaborate effectively in a fully remote environment