We are seeking a Cloud Infrastructure Engineer with strong expertise in Azure platform operations and engineering, operational reliability, hybrid connectivity, and cloud governance.
This role operates, secures, and evolves our enterprise Azure platform as we move to a fully code-driven, pipeline-based infrastructure model, aligned to Microsoft Cloud Adoption Framework (CAF) maturity goals. This is an infrastructure operations role: you will balance engineering work with day-to-day operational support and help maintain standards and controls aligned with NIST and FFIEC in a regulated financial services environment.
The ideal candidate should be comfortable advocating for best practices, constructively challenging weak implementations, and adapting when presented with stronger technical or operational approaches. The ideal candidate brings intellectual curiosity, stays current with evolving Azure capabilities, and shares what they learn with the team.
What you’ll do
Maintain enterprise-scale Azure solutions, ensuring best practices in cloud architecture, security, operational efficiency, and governance are followed.
Implement Azure Policy as code to enforce landing zone standards (management groups, subscriptions, RBAC, and tagging) in partnership with Cloud Architecture.
Manage spoke-level network configuration within the hub-and-spoke model, including NSGs, Private Endpoints, Private DNS, and routing, in partnership with Network Engineering.
Troubleshoot connectivity across DNS, routing, NSG and firewall rules, private endpoints, Azure Firewall, Application Gateway/WAF, load balancing, and ExpressRoute paths.
Enable secure connectivity for monitoring and operational tooling in coordination with Network Engineering and Information Security.
Operationalize multi-region resiliency strategies for critical platforms, ensuring failover and recovery are predictable and aligned with FFIEC business continuity expectations.
Execute disaster recovery exercises, failover testing, and root cause analysis, and advocate for architecture decisions that improve scalability, recoverability, and stability.
Help mature platform operations in alignment with Microsoft Cloud Adoption Framework (CAF) principles.
Build and maintain Azure infrastructure as code using Bicep and reusable modules, deployed through CI/CD pipelines with peer review and pre-deployment validation.
Help transition existing environments to fully code-managed deployments, including adopting existing resources into code and remediating configuration drift.
Automate recurring operational tasks using PowerShell, Azure CLI, Azure Automation, and pipeline-driven workflows, and retire manual processes wherever practical.
Improve operational visibility through Azure Monitor, Log Analytics (KQL), workbooks, and actionable alerting.
Develop and maintain technical documentation, runbooks, operational standards, and architecture diagrams, versioned alongside infrastructure code where practical.
Implement secure cloud patterns aligned with Zero Trust principles, including Entra ID, Privileged Identity Management, managed identities, Key Vault, and network segmentation.
Collaborate with Information Security teams to support regulatory compliance, vulnerability remediation, segmentation strategies, and audit readiness.
Conduct access reviews, configuration and policy validation, and vulnerability remediation.
Produce operational and compliance artifacts that support internal audits and regulatory examinations.
Harden Azure workloads against CIS and Microsoft security baselines, and track security posture through Defender for Cloud and regulatory compliance initiatives.
Support Microsoft Fabric infrastructure, including private connectivity, cloud and on-premises data gateways, workspace administration, and capacity management.
Mentor engineers on infrastructure as code, Azure operations, and engineering best practices.
Participate in architecture and design reviews.
What do you need?
Minimum of 5 years of enterprise cloud infrastructure and engineering experience with a strong focus on Azure.
Solid Azure networking fundamentals, including NSGs, routing, DNS, Private Link, and hybrid connectivity troubleshooting.
Hands-on proficiency with Bicep, ARM templates, and Azure Policy.
Experience with Git-based workflows (branching, pull requests, code review) and with deploying infrastructure through CI/CD pipelines.
Troubleshooting experience with Azure Monitor, Log Analytics (KQL), and Network Watcher.
Strong understanding of Zero Trust and cloud security principles.
Experience with Microsoft Entra ID, hybrid identity, RBAC, managed identities, and Key Vault.
Operational experience with Azure IaaS and PaaS services, including virtual machines, App Services, Azure SQL, and Storage, on both Windows and Linux.
Proficiency in PowerShell and Azure CLI for automation and operational support.
Excellent analytical, troubleshooting, communication, and documentation skills.
Demonstrated commitment to continuous learning and professional development.
Working knowledge of formal change management (ITIL or equivalent) and ServiceNow.
Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
Experience in a regulated industry, including producing compliance evidence aligned with frameworks such as NIST or FFIEC.
Preferred qualifications
Experience with Microsoft Fabric or related Azure data platform services (Synapse, Data Lake), including gateways and private connectivity.
Advanced Bicep module design and pipeline authoring in Azure DevOps or GitHub Actions.
Experience with Defender for Cloud and security baseline hardening (CIS or Microsoft).
Familiarity with Microsoft Cloud Adoption Framework (CAF) and Azure landing zone concepts.
Azure Virtual Desktop and DevBox image and host pool management.
ExpressRoute failover behavior and multi-region network resiliency.
Python scripting.
Azure certifications such as AZ-104, AZ-305, AZ-400, AZ-500, or AZ-700. Practical expertise and operational experience are prioritized over certifications.
Technology Skills
Familiarity with monitoring, observability, and logging tools including Azure Monitor and Log Analytics.
Familiarity with Agile, Scrum, or related project delivery methodologies.
Expanded Responsibilities – BAU Operations & Support
In addition to strategic infrastructure work, the Cloud Infrastructure Engineer plays a critical role in day-to-day Business As Usual (BAU) operational support. This includes ensuring operational continuity, managing user-level support escalations, and optimizing existing infrastructure resources.
Key BAU responsibilities include
Providing daily second- and third-level support for Azure services, Entra ID, virtual machines, and performance troubleshooting.
Assisting senior engineering staff in operational maintenance tasks including patch compliance reviews, backup monitoring, and performance tuning.
Participating in routine cloud operations such as onboarding automation, runbook documentation, and performance alert triage.
Executing and documenting DR readiness steps and root cause analysis for production-impacting events.
Working with the service desk and NOC to route and resolve escalations and maintain operational visibility.
Participating in the on-call rotation, responding to critical alerts during and after business hours and escalating as needed.
Preparing and executing changes through the ServiceNow change management process, including documented plans, testing, validation, and backout steps.
Ensuring compliance of Azure resources through tagging, configuration reviews, and policy validation.
Customers Bank is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
We also provide “reasonable accommodations”, upon request, to qualified individuals with disabilities, in accordance with the Americans with Disabilities Act and applicable state and local laws.
Diversity Statement
At Customers Bank, we believe in working smart, working together, and having fun while delivering innovative solutions and memorable experiences for our customers. We are committed to the continual advancement of a culture which reflects the value we place on diversity, equity, and inclusion. We honor the diverse experiences, perspectives, and identities of our team members, and we recognize that it is their passion, creativity, and integrity that drives our success. Step into your future with us! Let’s take on tomorrow.
