Azure Cloud Engineer

• Vienna
• Hybrid
• Hourly salary: $75

NFCU is seeking an experienced Senior Azure Cloud & GitHub Platform Engineer to design implement secure automate and support enterprise cloud platforms Kubernetes environments developer platforms and CI/CD ecosystems.
As NFCU continues to modernize its cloud-native application landscape and software delivery capabilities we require a highly skilled platform engineer who can provide expertise across Azure infrastructure identity and access management Kubernetes administration GitHub Enterprise automation frameworks and deployment pipelines. The successful candidate will serve as a technical leader responsible for ensuring cloud platforms are secure reliable scalable observable and production-ready.
This is not a traditional infrastructure administration role. It is a specialized engineering position focused on cloud platform architecture Kubernetes operations identity management GitHub administration automation engineering deployment governance and DevSecOps enablement. The individual will work closely with Application Development teams Platform Engineering Information Security Architecture SRE and Product Owners to build and operate enterprise-grade cloud and development platforms.
The Senior Azure Cloud & GitHub Platform Engineer will play a critical role in enabling secure software delivery cloud tenancy management infrastructure automation deployment standardization and developer productivity across the organization.
Key Responsibilities:
Design implement administer and support Azure cloud platform services and enterprise workloads.
Deploy manage and optimize Azure services including:
Azure Kubernetes Service (AKS)
Azure Service Bus
Azure Storage Accounts
Azure Functions
Azure App Services
Azure Key Vault
Azure API Management
Azure Monitor
Log Analytics
Azure Networking Services
Design and maintain highly available resilient scalable and secure cloud-native architectures.
Deploy administer and support AKS clusters including:
Cluster provisioning
Upgrades and patching
Ingress controllers
Autoscaling
Networking configurations
Monitoring and observability
Workload security
Implement and manage Identity and Access Management (IAM) solutions utilizing:
Microsoft Entra ID
RBAC
Managed Identities
Service Principals
Conditional Access
Privileged Identity Management (PIM)
Establish least-privilege access models and governance standards across cloud environments.
Automate and standardize the configuration/administration of GitHub Enterprise environments including:
Organizations
Teams
Repositories
Branch Protection Policies
Repository Rulesets
Security Policies
Secret Management
Enterprise Governance Controls
Deploy and support GitHub Apps OAuth integrations webhooks and enterprise authentication mechanisms.
Design develop and maintain CI/CD pipelines utilizing:
GitHub Actions
Reusable Workflows
Composite Actions
Self-Hosted Runners
GitHub Enterprise Integrations
Administer GitHub-hosted and self-hosted runners including provisioning scaling security hardening upgrades and lifecycle management.
Implement secure workload authentication using:
OpenID Connect (OIDC)
Managed Identities
Federated Credentials
Secretless Authentication Patterns
Develop Infrastructure as Code (IaC) solutions using:
Packer
ARM Templates
Integrate CI/CD pipelines with Azure cloud services and Kubernetes environments.
Implement deployment strategies including:
Blue-Green Deployments
Canary Releases
Rolling Updates
Establish DevSecOps controls and automated quality gates across software delivery pipelines.
Support software supply chain security initiatives dependency management vulnerability remediation and compliance requirements.
Implement and maintain monitoring logging and observability solutions utilizing:
Azure Monitor
Log Analytics
Application Insights
Prometheus
Grafana
Troubleshoot cloud infrastructure Kubernetes identity networking CI/CD and application deployment issues.
Create operational runbooks architecture documentation platform standards and engineering best practices.
Partner with development teams to improve platform reliability deployment velocity security posture and operational effectiveness.
Support production incidents root-cause analysis activities and continuous improvement initiatives.
Required Qualifications:
Bachelors Degree in Computer Science Information Systems Software Engineering Engineering or a related technical field.
7 years of experience in Cloud Engineering Platform Engineering DevOps Engineering Site Reliability Engineering (SRE) or related technical disciplines.
5 years of hands-on experience working with Microsoft Azure cloud services.
Strong experience administering and supporting:
Azure Kubernetes Service (AKS)
Azure Functions
Azure Service Bus
Azure Storage Accounts
Azure App Services
Azure Networking Services
Azure Key Vault
Strong expertise in Identity and Access Management including:
Microsoft Entra ID
RBAC
Managed Identities
Service Principals
Conditional Access
PIM
Extensive experience administering GitHub Enterprise environments.
Strong experience developing and supporting CI/CD pipelines using GitHub Actions.
Experience configuring and managing:
GitHub Apps
OAuth Integrations
OpenID Connect (OIDC)
Self-Hosted Runners
Repository Security Controls
Experience administering Kubernetes environments and containerized workloads.
Experience implementing Infrastructure as Code using:
Experience with PowerShell Bash Python and automation scripting.
Strong understanding of:
Cloud Security
DevSecOps
CI/CD Practices
Enterprise Governance
Software Supply Chain Security
Experience with monitoring logging and observability platforms.
Strong analytical troubleshooting and problem-solving skills.
Excellent communication documentation and stakeholder engagement skills.
Ability to operate independently and provide technical leadership across multiple engineering teams.
Preferred Qualifications:
Microsoft Certified:
Azure Solutions Architect Expert
Azure Administrator Associate
Azure DevOps Engineer Expert
Certified Kubernetes Administrator (CKA)
GitHub Actions Certification
Experience implementing GitOps deployment models.
Experience supporting large-scale enterprise GitHub environments.
Experience with Azure Landing Zones and cloud governance frameworks.
Experience with enterprise security and compliance programs.
Experience within financial services banking insurance healthcare or other highly regulated industries.
Experience supporting enterprise developer platforms and internal engineering enablement programs.
Familiarity with Azure DevOps integration developer self-service platforms and modern platform engineering practices.
Ideal Candidate Profile:
A highly technical cloud and platform engineering professional who possesses deep expertise across Microsoft Azure services Kubernetes identity and access management GitHub Enterprise administration GitHub Actions CI/CD automation and infrastructure as code. This individual can independently design operate secure and optimize enterprise cloud platforms while enabling development teams through reliable self-service capabilities modern deployment pipelines and robust governance controls. They serve as a trusted technical leader responsible for ensuring cloud and developer platforms are secure scalable compliant operationally mature and production ready.