Senior Cloud Infrastructure Engineer - Azure

About the job OZ Digital LLC is a technology consulting firm focused on helping clients improve operations and decision-making through intelligent automation, data analytics, AI, and related digital solutions. Working across the Information Technology and Services space, the company partners with organizations that need secure, scalable digital foundations to support modern platforms and business outcomes. This role is an opportunity to shape secure cloud infrastructure patterns in a high-impact consulting environment. As a Senior Cloud Infrastructure Engineer - Azure, you will help define and strengthen the architectural foundations that support complex client environments, partnering closely with technical leadership and contributing to infrastructure decisions that emphasize security, resilience, and long-term maintainability. Responsibilities Maintain, refactor, and scale hardened Azure Landing Zones ensuring explicit logical segregation between control planes and data planes Govern infrastructure code quality by owning and leading comprehensive Terraform Pull Request (PR) reviews Implement zero-trust network perimeter controls, completely removing public service exposure Eliminate the use of static secrets and keys by establishing identity-driven authentication layers across all environments Collaborate with core technical stakeholders, including the CTO and Geo Practice Lead, to deliver secure infrastructure blueprints Requirements Qualifications & Skill Set Expert-level mastery of infrastructure decoupling strategies (separating data processing workloads from management states) Strong operational discipline in agile environments: active participation in sprint execution, backlog hygiene, and structured technical documentation Specific Tools & Technologies Infrastructure as Code: Advanced Terraform exclusively (expertise in state management, state recovery, complex nesting, and reusable enterprise module design) Identity & Cryptography: Microsoft Entra ID, Azure Key Vault (strictly leveraging Azure RBAC authorization models), OpenID Connect (OIDC) federated credentials Networking & Boundaries: Azure Private Link, Private Endpoints, Split-Horizon Private DNS Zone linking, and backend subnet isolation routing CI/CD Orchestration: Secure GitHub Actions workflow engineering utilizing passwordless authentication identities Workloads: Private network infrastructure hosting for analytical data environments (such as network-isolated Azure Databricks configurations) and secure model ingestion layers Certifications Required: Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Required: HashiCorp Certified: Terraform Associate or Advanced Preferred: Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate certification (SC-500) Preferred Skills Familiarity with financial or insurance sector compliance frameworks and MEC reference architecture patterns Practical alignment with cloud economics and fundamental infrastructure sizing optimizations