Senior Cloud Infrastructure Engineer

Job Overview

OZ Digital LLC is a technology consulting firm focused on helping clients improve operations and decision-making through intelligent automation, data analytics, AI, and related digital solutions. Working across the Information Technology and Services space, the company partners with organizations that need secure, scalable digital foundations to support modern platforms and business outcomes.

Key Responsibilities

• Maintain, refactor, and scale hardened Azure Landing Zones ensuring explicit logical segregation between control planes and data planes.


• Govern infrastructure code quality by owning and leading comprehensive Terraform Pull Request (PR) reviews.


• Implement zero-trust network perimeter controls, completely removing public service exposure.


• Eliminate the use of static secrets and keys by establishing identity-driven authentication layers across all environments.


• Collaborate with core technical stakeholders, including the CTO and Geo Practice Lead, to deliver secure infrastructure blueprints.

Required Qualifications

Qualifications & Skill Set
Expert-level mastery of infrastructure decoupling strategies (separating data processing workloads from management states).
Strong operational discipline in agile environments: active participation in sprint execution, backlog hygiene, and structured technical documentation.

Specific Tools & Technologies
Infrastructure as Code: Advanced Terraform exclusively (expertise in state management, state recovery, complex nesting, and reusable enterprise module design).
Identity & Cryptography: Microsoft Entra ID, Azure Key Vault (strictly leveraging Azure RBAC authorization models), OpenID Connect (OIDC) federated credentials.
Networking & Boundaries: Azure Private Link, Private Endpoints, Split-Horizon Private DNS Zone linking, and backend subnet isolation routing.
CI/CD Orchestration: Secure GitHub Actions workflow engineering utilizing passwordless authentication identities.
Workloads: Private network infrastructure hosting for analytical data environments (such as network-isolated Azure Databricks configurations) and secure model ingestion layers.

Certifications
Required: Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
Required: HashiCorp Certified: Terraform Associate or Advanced
Preferred: Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate certification (SC-500)

Preferred Skills
Familiarity with financial or insurance sector compliance frameworks and MEC reference architecture patterns.
Practical alignment with cloud economics and fundamental infrastructure sizing optimizations.