[Remote] Azure IAM Cloud Engineer
Note: The job is a remote job and is open to candidates in USA. Indium is seeking a Principal Cloud Engineer to lead cloud architecture, platform engineering, and delivery excellence for scalable, secure, and reliable systems. The role focuses on producing implementation-ready designs, validating them through prototypes and reference implementations, establishing governed cloud platforms, improving reliability and cost efficiency, mentoring engineering teams, and managing cloud vendor partnerships.
Responsibilities
- Own architecture and detailed design for complex cloud initiatives (greenfield + modernization)
- Create implementation-ready designs:
- Logical + physical architectures
- Network and identity models
- Security controls and threat analysis
- Availability, DR, and scaling strategies
- Data flow and integration patterns
- Observability and operational runbooks
- Produce clear and actionable artifacts, such as:
- Architecture decision records (ADRs)
- Reference architectures and “golden paths”
- Patterns catalog (e.g., event-driven, API-first, data share, batch/stream)
- Standards and guardrails for teams
- Build prototypes / spike solutions to de-risk complex designs (e.g., networking, IAM, performance, data movement)
- Create reference implementations (IaC, CI/CD templates, policy as code, sample services)
- Provide technical leadership during delivery: unblock teams, review PRs, guide implementation choices, and ensure design fidelity
- Define a secure-by-default posture: identity, encryption, secrets, network isolation, logging, vulnerability management
- Implement governance using native cloud capabilities and automation (policies, blueprints, landing zones, guardrails)
- Partner with security and risk teams to ensure controls are built-in, not bolted-on
- Design for resilience: HA patterns, DR strategies, chaos/testing approaches, graceful degradation
- Create observability standards: logs/metrics/traces, SLOs/SLIs, alerting, incident response workflows
- Drive operational readiness: runbooks, on-call enablement, error budgets, postmortems
- Design cost-aware architectures and continuous optimization practices: right-sizing, storage tiers, reserved capacity, autoscaling
- Provide guidance for performance testing, capacity planning, and scaling strategies
- Raise the bar for design quality and engineering rigor across teams
- Lead architecture reviews and design sessions; coach engineers on tradeoffs and patterns
- Influence without authority—build alignment across stakeholders
- Identify, evaluate, and select cloud technology vendors and partners to support strategic initiatives
- Assess vendor solutions for technical fit, security, compliance, cost, and operational impact
- Drive RFP/RFI processes, coordinate technical due diligence, and negotiate terms with vendors
- Establish ongoing relationships with key partners, ensuring alignment with architecture standards and delivery goals
Skills
- • 10+ years in software/platform engineering with significant cloud architecture ownership at scale
- • Proven experience leading design for complex cloud systems (not just participating)
- • Demonstrated hands-on experience building and operating cloud workloads:
- • Infrastructure as Code (Terraform strongly preferred; CloudFormation/Bicep acceptable)
- • CI/CD and release automation (GitHub Actions/Azure DevOps/Jenkins/etc.)
- • Containers and orchestration (Kubernetes/EKS/AKS/GKE; or equivalent)
- • Strong cloud fundamentals across:
- • Identity and access management (IAM, RBAC, OAuth/OIDC, least privilege)
- • Networking (VPC/VNet, routing, peering, private endpoints, DNS, zero trust patterns)
- • Security (encryption, key management, secrets, threat modeling, posture management)
- • Reliability (HA, DR, multi-zone, multi-region strategies)
- • Observability (structured logging, distributed tracing, metrics, SLOs)
- • Experience with architecture artifacts and methodologies:
- • ADRs, reference architectures, patterns, and well-architected reviews
- • Ability to communicate design tradeoffs clearly to technical + executive audiences
- • Multi-cloud design experience (Azure/AWS/GCP) or hybrid cloud design (on-prem + cloud)
- • Strong integration architecture background:
- • API management, event streaming, messaging, service mesh, integration platforms
- • Data platform knowledge:
- • Data lakes/lake houses, data sharing patterns, streaming vs batch, governance
- • Policy-as-code tooling (OPA/Gatekeeper, Azure Policy, AWS SCPs; etc.)
- • FinOps practices and cloud cost optimization leadership
- • Certifications (helpful but not required):
- • AWS Solutions Architect Professional / Azure Solutions Architect Expert / GCP PCA
- • Kubernetes (CKA/CKAD), Security (CCSP), etc
Company Overview
Company H1B Sponsorship