Principal Cloud Infrastructure Engineer
$130,000–$250,000 year
Remote · United States or Schenectady, New York, United States
Job Summary
Principal Cloud Infrastructure Engineer responsible for Azure architecture across prod, staging, and dev, owning Terraform IaC, and designing secure cloud landing zones. Leads infrastructure patterns for environment separation, multi-tenant and regional deployments, enhances Identity & Access Management (RBAC, PIM, Conditional Access), and champions disaster recovery, logging, monitoring, and security controls aligned with SOC 2 and ISO 27001. Provides technical direction to remote Platform/DevOps engineers, documents architecture, identifies gaps, and drives cost, performance, and reliability improvements. Requires 7+ years in cloud infrastructure/SRE or cloud security, 4+ years Azure in production SaaS, and staff-level experience with Terraform/Bicep, production ownership, and strong communication.
Required Qualifications
- 7+ years in cloud infrastructure, SRE, or cloud security roles with production systems experience
- 4+ years deep, hands-on Azure experience in production SaaS environments
- Experience operating at Staff-level scope, shaping infrastructure decisions and standards
- Strong Terraform/Bicep experience at production scale (module design, environment structure, governance)
- Proven experience designing cloud architecture, not just implementing existing designs
- Experience owning production systems, including uptime, reliability, and incident response
- Experience designing and executing disaster recovery strategies (RTO/RPO, restore procedures)
- Strong hands-on experience across Azure core platform components (App Services, networking, managed databases, IAM, storage, monitoring, and logging)
- Deep experience with Entra ID / Azure AD (RBAC, PIM, Conditional Access)
- Strong understanding of cloud networking and security (segmentation, private endpoints, firewall/WAF, zero trust)
- Experience designing or evolving infrastructure for multi-tenant SaaS platforms
- Experience designing or contributing to regional or multi-region architectures, including data residency considerations
- Experience in working with distributed or offshore engineering teams
- Experience mentoring team members or leading technical teams
- Strong written and verbal communication skills in English
- Azure certification (AZ-305, AZ-500)
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.