Total ETO

Cloud Engineer

• Secure customer-data platform — design and build an on-demand, single-tenant environment for working with sensitive customer data: ephemeral, region-resident, egress-controlled, and fully audited, so production data never lands on personal devices.
• Compliance foundation — use it to anchor our CMMC / CPCSC Level 1 self-assessment as we open regulated and defense markets.
• Lead the end-to-end architecture of our multi-subscription Azure estate — hosting, edge, monitoring, and internal tooling.
• Design and maintain infrastructure-as-code (Bicep / Azure Verified Modules) as the single source of truth for every environment.
• Provision, scale, and operate customer hosting environments on Windows Server, IIS, and SQL Server.
• Architect the edge and identity layers: Azure Front Door + WAF, per-customer access controls, Key Vault, and managed identities.
• Enforce least-privilege access, encryption in transit and at rest, and secure-by-default baselines across the estate.
• Advance our compliance posture (e.g., CMMC, CPCSC, SOC 2-style controls) to support growth into regulated and defense markets.
• Design and operate CI/CD release pipelines (Azure DevOps) that ship infrastructure and application changes safely and repeatably.
• Automate operational work in PowerShell — deployments, provisioning, secret rotation, and scheduled jobs.
• Champion “paved-road” workflows and code review so nothing ships by hand.
• Treat cloud cost as a first-class design constraint — right-sizing, tagging, and spend visibility across subscriptions (Azure Cost Management, budgets and alerts, reservation planning).
• Forecast and optimize run-rate cost without compromising reliability or security.
• Bring cost trade-offs into architecture decisions up front, not after the invoice.
• Design and run the monitoring, alerting, and incident pipeline (Azure Monitor, Log Analytics, Logic Apps, Event Grid to Jira / PagerDuty).
• Define service levels and runbooks, lead incident response, and drive blameless post-incident reviews.
• Maintain backup/restore and disaster-recovery practices for customer-facing systems.

Senior CloudOps Architect

• Implement and maintain infrastructure-as-code
• Provision, configure, scale, and operate customer hosting environments
• Apply and maintain the security baselines
• Implement, run, and maintain CI/CD release pipelines
• Operate the monitoring, alerting, and incident pipeline

Senior CloudOps Architect

CloudOps Engineer