Cloud Engineer

We are looking for an experienced Cloud Operations Engineer to join our infrastructure team. You will be responsible for the day-to-day operations, reliability, and continuous improvement of cloud-hosted web platforms running on Microsoft Azure. Our environments are web-centric and content-driven, built around web deployments, containerised workloads on Azure Kubernetes Service (AKS) and Azure PaaS services.

You will work across a range of client environments, handling everything from routine platform health and incident response to proactive capacity management, security hardening and release pipeline support. This role requires a blend of deep Azure expertise, strong networking fundamentals, and hands-on experience with web platform operations.

Key Responsibilities

Cloud Infrastructure & Azure PaaS

• Operate and maintain Azure-hosted environments including App Services, Azure SQL, Azure Cache for Redis, Storage Accounts, Key Vault, Service Bus, and related PaaS components.
• Monitor resource health, manage scaling configurations, and respond to platform-level incidents across multiple client subscriptions.
• Maintain and review Azure Resource Manager (ARM) templates or equivalent Infrastructure-as-Code definitions for managed environments.
• Support lifecycle management of App Service Plans, deployment slots, and application settings across dev, staging and production tiers.

Kubernetes & Container Operations (AKS)

• Manage and operate Azure Kubernetes Service (AKS) clusters, including node pool management, upgrades and capacity planning.
• Maintain Kubernetes manifests (Deployments, Services, ConfigMaps, Secrets, HPA) and ensure configuration accuracy across environments.
• Triage pod-level issues including CrashLoopBackOff, OOMKilled, and ImagePullBackOff errors; perform log analysis using kubectl and integrated log pipelines.
• Coordinate OS and Kubernetes version upgrades across node pools, managing zonal capacity and drain/cordon procedures safely.
• Understand and support Windows and Linux node pools within mixed AKS environments.

Application Platform Operations

• Support Web application environments hosted on Azure across both App Service and AKS deployment models.
• Diagnose and resolve Application-specific issues including publishing failures, cache management, configuration errors and log-level diagnostics.
• Maintain the environment configurations (connection strings, App_Config patches, role-specific settings)
• Coordinate version patching and hotfix deployments in collaboration with development teams.

Networking, CDN, DNS & TLS

• Manage and troubleshoot Azure networking components: Virtual Networks, Subnets, NSGs, Private Endpoints, Private DNS Zones, Application Gateway, Azure Front Door and WAF policies.
• Operate CDN configurations (Azure Front Door, Cloudflare, or equivalent) including cache rule management, origin health and traffic routing.
• Manage DNS zones and records, including CNAME, A, TXT, and MX records across public and private DNS namespaces.
• Handle TLS certificate lifecycle management: procurement, renewal, installation and troubleshooting across App Services, AKS ingress controllers and self-hosted components.
• Diagnose TLS trust chain issues, certificate binding mismatches and HTTPS redirect problems in production environments.

Monitoring & Observability

• Configure and maintain monitoring solutions using Azure Monitor, Log Analytics, Application Insights and KQL-based alerting.
• Build and maintain Prometheus and Grafana dashboards for Kubernetes and application-level metrics, including custom alert rules and recording rules.
• Develop runbooks and response playbooks for common alert scenarios and continuously refine alert thresholds to reduce noise.
• Conduct root cause analysis (RCA) for production incidents, producing clear post-incident documentation.

Databases

• Operate Azure SQL databases including DTU/vCore sizing, geo-replication, failover groups and connection string management.
• Perform basic database-level diagnostics: query performance review, index fragmentation checks, and backup verification.
• Support Azure SQL firewall rules, Private Endpoint integration, and TLS enforcement posture reviews.

CI/CD & Source Control

• Support and maintain Azure DevOps pipelines (YAML-based) for application deployments, infrastructure updates and operational automation tasks.
• Work with Git-based branching strategies; perform code reviews on pipeline YAML and operational scripts.
• Coordinate release deployments across environments, including pre/post deployment health checks and rollback procedures.

Security & Compliance

• Apply and maintain security baselines across Azure resources including RBAC, Managed Identities, Key Vault access policies and network isolation patterns.
• Review and action security findings from Azure Defender or similar scanning tools.
• Support audit responses and evidence gathering for security compliance exercises (e.g. CIS benchmarks, internal controls).

Required Skills & Experience

• 3+ years of hands-on experience in a cloud operations, DevOps, or infrastructure engineering role.
• Deep practical knowledge of Microsoft Azure - subscriptions, resource groups, IAM, PaaS services and networking topology.
• Strong experience with Azure App Services (deployment slots, custom domains, TLS bindings, health checks, scaling).
• Proven operational experience with AKS or Kubernetes in production environments.
• Solid understanding of web application networking: HTTP/HTTPS, load balancers, reverse proxies, CDN behaviour and WAF rule management.
• Experience managing DNS and TLS/PKI in an enterprise context, including certificate chain troubleshooting.
• Hands-on experience with application platforms in an operations or support capacity.
• Familiarity with Solr or other enterprise search platforms in a production context.
• Working knowledge of Azure SQL and general relational database operations.
• Proficiency with Azure Monitor, Log Analytics, and KQL for observability and alerting.
• Experience with Prometheus and Grafana for infrastructure and application monitoring.
• Competence with Azure DevOps YAML pipelines and Git workflows.
• Strong Windows administration skills, including PowerShell scripting and IIS.
• Ability to produce clear incident documentation, RCAs and technical runbooks.
• Strong written and verbal communication skills, with the ability to translate technical findings for non-technical stakeholders.

Nice to Have

• Experience with Ansible for configuration management and operational automation across Windows and Linux targets.
• Experience with Terraform for Azure infrastructure provisioning, including state management, drift detection, and module design.
• Familiarity with Cloudflare (WAF, Load Balancing, Zero Trust Gateway, DNS).
• Exposure to any Headless/JS based front-end architecture.
• Experience with Azure Private DNS Resolver and hybrid DNS forwarding patterns.
• Knowledge of Bicep or ARM templates for Azure-native IaC.
• Familiarity with Azure Resource Graph and KQL-based multi-subscription infrastructure auditing.
• Exposure to Datadog or other third-party APM/synthetic monitoring platforms.

We offer:

• Innovative and dynamic projects for worldwide top brands
• Working with more recent technologies
• Sharpen your skills in instructor-led trainings and lunch and learns
• We cover costs for certifications and events
• Generous compensation package
• Flexible working hours
• Additional health insurance that guarantees fast access to contracted health services
• Multisport card
• 25 days paid holidays
• Campus X membership benefits
• Sharpen your skills in instructor led trainings and lunch and learns
• We reimburse for certifications and participate in events like hackathons

Americaneagle.com provides its employees with an energetic work environment and opportunities to further develop their skills. Our dedication to growing our development team is how we can produce excellent sites and applications for our clients. We do all of this while maintaining a family value focus and pushing for a good work-life balance.

By submitting your application, you acknowledge and consent to the Company processing your personal data exclusively for recruitment and selection purposes, in accordance with our Privacy Notice: Privacy (English)

All submitted documents will be handled with the utmost confidentiality. Please note that only shortlisted candidates will be contacted for the next stage of the selection process.