Azure Cloud Engineer
We're looking for experienced Azure Cloud Engineers to support and improve our hosting platform that provides Boomi Integration Platform as a Service (iPaaS) runtimes to external clients. Our current Azure environment runs Linux-based Boomi runtimes on Kubernetes (AKS), so solid hands-on experience operating production Kubernetes workloads — along with Linux administration and troubleshooting skills — is essential from day one.
Beyond supporting our hosting customers, you'll help drive larger modernization initiatives — replacing manual, ClickOps-heavy configuration with OpenTofu/Terraform and an automation-first approach to make the platform reliable, secure, and repeatable. Experience with VM-based workloads matters here too, since not everything we run is containerized and we favor the simplest architecture that fits the job.
• *Required Qualifications**
- 4+ years of experience in Azure cloud infrastructure engineering (experience in AWS is a plus)
- Production Kubernetes experience (AKS preferred), including operating containerized workloads at scale
- Strong production experience with Infrastructure-as-Code using OpenTofu (or Terraform with a willingness to use OpenTofu), including modules, state management, and multi-environment patterns
- Hands-on experience with CI/CD — preferably CircleCI — to automate validation, testing, approvals, and deployments
- Strong Git/version control practices with GitHub (PR-based workflows, code review, branching/release strategies)
- Proven track record of automation-first engineering and reducing manual operational risk
- Solid fundamentals in Linux administration and troubleshooting as well as networking concepts (DNS, TLS, routing, firewalling, security groups/NSGs)
- Operational maturity: monitoring/alerting basics, incident response, root cause analysis, and pragmatic remediation
• *Preferred Qualifications**
- Experience hosting and operating production workloads on VM-based infrastructure (gold images, patching approaches, backups, configuration management, lifecycle)
- Azure experience with: VNets, NSGs, IAM/RBAC, Key Vault, Monitor, VM scale concepts (as applicable)
- AWS experience with: VPC, IAM, EC2/ASG concepts, load balancing, CloudWatch, SSM
- Experience with policy/guardrails (e.g., OPA, Sentinel equivalents, Azure Policy, SCP-like controls)
- Observability tooling experience (Azure Monitor, CloudWatch, Datadog, Prometheus/Grafana, ELK/OpenSearch)
- Boomi experience (Atom/AtomSphere runtime concepts, runtime hosting considerations, upgrades/patching expectations)
- Experience working in a hosting operation (multi-tenant SaaS or managed hosting), including environment lifecycle, change control, SLAs/on-call, and operational runbooks
- VPN connectivity experience (site-to-site VPNs, routing, CIDR management, troubleshooting, and integrating private connectivity patterns across AWS/Azure and customer networks)
• *Engineering Principles We Value**
- Automation over ClickOps
- Standardization and repeatability across clouds where it makes sense
- Simplicity and operability (choose the right tool for the job; avoid over-engineering)
Beyond supporting our hosting customers, you'll help drive larger modernization initiatives — replacing manual, ClickOps-heavy configuration with OpenTofu/Terraform and an automation-first approach to make the platform reliable, secure, and repeatable. Experience with VM-based workloads matters here too, since not everything we run is containerized and we favor the simplest architecture that fits the job.
• *Required Qualifications**
- 4+ years of experience in Azure cloud infrastructure engineering (experience in AWS is a plus)
- Production Kubernetes experience (AKS preferred), including operating containerized workloads at scale
- Strong production experience with Infrastructure-as-Code using OpenTofu (or Terraform with a willingness to use OpenTofu), including modules, state management, and multi-environment patterns
- Hands-on experience with CI/CD — preferably CircleCI — to automate validation, testing, approvals, and deployments
- Strong Git/version control practices with GitHub (PR-based workflows, code review, branching/release strategies)
- Proven track record of automation-first engineering and reducing manual operational risk
- Solid fundamentals in Linux administration and troubleshooting as well as networking concepts (DNS, TLS, routing, firewalling, security groups/NSGs)
- Operational maturity: monitoring/alerting basics, incident response, root cause analysis, and pragmatic remediation
• *Preferred Qualifications**
- Experience hosting and operating production workloads on VM-based infrastructure (gold images, patching approaches, backups, configuration management, lifecycle)
- Azure experience with: VNets, NSGs, IAM/RBAC, Key Vault, Monitor, VM scale concepts (as applicable)
- AWS experience with: VPC, IAM, EC2/ASG concepts, load balancing, CloudWatch, SSM
- Experience with policy/guardrails (e.g., OPA, Sentinel equivalents, Azure Policy, SCP-like controls)
- Observability tooling experience (Azure Monitor, CloudWatch, Datadog, Prometheus/Grafana, ELK/OpenSearch)
- Boomi experience (Atom/AtomSphere runtime concepts, runtime hosting considerations, upgrades/patching expectations)
- Experience working in a hosting operation (multi-tenant SaaS or managed hosting), including environment lifecycle, change control, SLAs/on-call, and operational runbooks
- VPN connectivity experience (site-to-site VPNs, routing, CIDR management, troubleshooting, and integrating private connectivity patterns across AWS/Azure and customer networks)
• *Engineering Principles We Value**
- Automation over ClickOps
- Standardization and repeatability across clouds where it makes sense
- Simplicity and operability (choose the right tool for the job; avoid over-engineering)