Lead Cloud Engineer (Azure)
关于 Egen:Egen 是一个快速增长的创业公司,以数据为首要思维方式。我们将最好的工程人才与谷歌云和 Salesforce 等最先进的技术平台合作,帮助客户通过数据和见解推动行动和影响。我们致力于成为最佳的人选择工作的地方,以便他们可以应用他们的工程和技术专业知识来想象下一步如何让数据和平台能够更好地改变世界。我们致敬于学习,勃解决困难的问题,不断创新以实现快速有效结果。如果这描述了你,我们希望你加入我们的团队。了解 Egen 生活的更多信息?除了工作描述之外,请查看这些资源。在 Egen 文化和价值观 Egen 职业发展的 Egen 生活与 Egen 利益有关的工作:·基础设施作为代码 (IaC) 交付:设计,作者和维护可重复使用的 Terraform 模块和部署管道 Azure 企业数据环境,包括核心网络,安全控制,资源组合和服务集成 · 三级架构设置:实现和管理3层架构 (控制平面,数据平面和目标存储)在指定 Azure 订阅和资源组中支持高安全性 (阶段/prod)和低安全性 (dev/test) 的环境 ·混合多云网络与安全:配置 Azure 与 Google Cloud 高级数据湖 (ADL) 之间安全的私人网络和连接通过公共互联网曝光无需私人端点访问 BigQuery,云存储,FHIR Store 和 DICOM Store ·平台服务 &存储提供:部署和配置 Azure 服务,包括 Azure Kubernetes Service (AKS),PostgreSQL 灵活服务器的 Azure 数据库 (含 pgvector),Blob Storage,Key Vault,Azure 容器登记表 (ACR) 和 Azure 文物 ·身份与访问管理 (IAM):整合 Entra ID 登录执行基于角色的访问控制 (RBAC),最小特权权许可以及 SailPoint 由管理的组件,除了个人服务帐户和 JIT 升级之外。享有特权;观察性 & 符合性:设置记录和监控通过 Azure 监测,确保所有远程计量和审核日志都严格配置以排除获取保护健康信息 (PHI) 关于你:平台:·云计算:专家级经验与微软 Az
查看英文原文
About Egen:
Egen is a fast-growing and entrepreneurial company with a data-first mindset. We bring together the best engineering talent working with the most advanced technology platforms, including Google Cloud and Salesforce, to help clients drive action and impact through data and insights. We are committed to being a place where the best people choose to work so they can apply their engineering and technology expertise to envision what is next for how data and platforms can change the world for the better. We are dedicated to learning, thrive on solving tough problems, and continually innovate to achieve fast, effective results. If this describes you, we want you on our team.
Want to learn more about life at Egen? Check out these resources in addition to the job description.
Meet Egen
Life at Egen
Culture and Values at Egen
Career Development at Egen
Benefits at Egen
About the job:
- Infrastructure-as-Code (IaC) Delivery: Design, author, and maintain reusable Terraform modules and deployment pipelines for the Azure Enterprise Data environment, including core networking, security controls, resource groups, and service integrations
- Three-Plane Architecture Setup: Implement and manage the three-plane architecture (Control Plane, Data Plane, and Target Stores) across designated Azure subscriptions and resource groups supporting high-assurance (stage/prod) and low-assurance (dev/test) environments
- Hybrid Multi-Cloud Networking & Security: Configure secure private networking and connectivity between Azure and the Google Cloud Advanced Data Lake (ADL)—reaching BigQuery, Cloud Storage, FHIR Store, and DICOM Store via private endpoints without public internet exposure
- Platform Services & Storage Provisioning: Deploy and configure Azure services including Azure Kubernetes Service (AKS), Azure Database for PostgreSQL flexible server (with pgvector), Blob Storage, Key Vault, Azure Container Registry (ACR), and Azure Artifacts
- Identity & Access Management (IAM): Integrate Entra ID sign-in enforcing role-based access control (RBAC), least-privilege permissions, and SailPoint-governed groups, alongside personal service accounts and JIT elevation for privileged access
- Observability & Compliance: Configure centralized logging and monitoring via Azure Monitor, ensuring all telemetry and audit logs are strictly configured to exclude Protected Health Information (PHI)
About you:
- Cloud Platforms: Expert-level experience with Microsoft Azure enterprise data platforms, hybrid multi-cloud architectures, and integration points with Google Cloud and Microsoft Fabric
- Containerization & Orchestration: Proven experience deploying and operating Apache Airflow, Milvus, Neo4j operators, and custom workloads on Azure Kubernetes Service (AKS), including GPU node pool configuration
- Automation & Tooling: Deep proficiency in Infrastructure-as-Code (Terraform, Spacelift/Terraform Enterprise) and CI/CD pipeline implementation via Azure DevOps and GitHub Enterprise
- Healthcare Compliance & Security: Strong working knowledge of HIPAA/PHI compliance controls, data residency restrictions (US-based storage/processing), encryption standards (TLS 1.2+, at-rest key management), and secure SDLC practices
Compensation & Benefits:
This role is eligible for our competitive salary and comprehensive benefits package to support your well-being:
- Comprehensive Health Insurance
- Paid Leave (Vacation/PTO)
- Paid Holidays
- Sick Leave
- Parental Leave
- Bereavement Leave
- 401 (k) Employer Match
- Employee Referral Bonuses
Check out our complete list of benefits here - >
Important:All roles are subject to standard hiring verification practices, which may include background checks, employment verification, and other relevant checks.
EEO and Accommodations:
Egen is an equal opportunity employer and is committed to inclusion, diversity, and equity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veterans’ status, or any other characteristic protected by federal, state, or local laws. Egen will also consider qualified applications with criminal histories, consistent with legal requirements. Egen welcomes and encourages applications from individuals with disabilities. Reasonable accommodations are available for candidates during all aspects of the selection process. Please advise the talent acquisition team if you require accommodations during the interview process.
Originally posted on Himalayas