Lead Cloud Engineer (Azure)

About Egen:

Egen is a fast-growing and entrepreneurial company with a data-first mindset. We bring together the best engineering talent working with the most advanced technology platforms, including Google Cloud and Salesforce, to help clients drive action and impact through data and insights. We are committed to being a place where the best people choose to work so they can apply their engineering and technology expertise to envision what is next for how data and platforms can change the world for the better. We are dedicated to learning, thrive on solving tough problems, and continually innovate to achieve fast, effective results. If this describes you, we want you on our team.

Want to learn more about life at Egen? Check out these resources in addition to the job description.

Meet Egen

Life at Egen

Culture and Values at Egen

Career Development at Egen

Benefits at Egen

About the job:
- Infrastructure-as-Code (IaC) Delivery: Design, author, and maintain reusable Terraform modules and deployment pipelines for the Azure Enterprise Data environment, including core networking, security controls, resource groups, and service integrations

- Three-Plane Architecture Setup: Implement and manage the three-plane architecture (Control Plane, Data Plane, and Target Stores) across designated Azure subscriptions and resource groups supporting high-assurance (stage/prod) and low-assurance (dev/test) environments

- Hybrid Multi-Cloud Networking & Security: Configure secure private networking and connectivity between Azure and the Google Cloud Advanced Data Lake (ADL)—reaching BigQuery, Cloud Storage, FHIR Store, and DICOM Store via private endpoints without public internet exposure

- Platform Services & Storage Provisioning: Deploy and configure Azure services including Azure Kubernetes Service (AKS), Azure Database for PostgreSQL flexible server (with pgvector ), Blob Storage, Key Vault, Azure Container Registry (ACR), and Azure Artifacts

- Identity & Access Management (IAM): Integrate Entra ID sign-in enforcing role-based access control (RBAC), least-privilege permissions, and SailPoint-governed groups, alongside personal service accounts and JIT elevation for privileged access

- Observability & Compliance: Configure centralized logging and monitoring via Azure Monitor, ensuring all telemetry and audit logs are strictly configured to exclude Protected Health Information (PHI)

About you:
- Cloud Platforms: Expert-level experience with Microsoft Azure enterprise data platforms, hybrid multi-cloud architectures, and integration points with Google Cloud and Microsoft Fabric

- Containerization & Orchestration: Proven experience deploying and operating Apache Airflow, Milvus, Neo4j operators, and custom workloads on Azure Kubernetes Service (AKS), including GPU node pool configuration

- Automation & Tooling: Deep proficiency in Infrastructure-as-Code (Terraform, Spacelift/Terraform Enterprise) and CI/CD pipeline implementation via Azure DevOps and GitHub Enterprise

- Healthcare Compliance & Security: Strong working knowledge of HIPAA/PHI compliance controls, data residency restrictions (US-based storage/processing), encryption standards (TLS 1.2+, at-rest key management), and secure SDLC practices