Cloud Engineer (Azure)
Our Essence: Cresteo is on a mission to be the world leader in people-first and honest nearshore tech services. We prioritize a people-centered approach in an industry that often feels distant and impersonal. Our services are led by experienced, incredibly talented professionals who are changing the system from within - while collaborating with top global clients. Our foundation is built on: • Deep expertise • Candid transparency • Profit-sharing • Fearless innovation Our team stands out for their deep-rooted passion for corporate change, treating software development as a human sport and art form. When it comes to recruitment, we won't box you into rigid questionnaires; we genuinely want to get to know you. Our interactions are not transactional but human-centered, seeking genuine understanding and connection. You'll hear about our core values and experience them with us firsthand. They define our essence. Join Cresteo and be part of the change we're championing! Why You Belong Here As a CloudEngineer at Cresteo, you'll be more than just a developer; you will be part of transforming the tech industry through our honest, transparent, and people-centric approach. Your role will be diverse and dynamic. You'll be instrumental in developing and maintaining our software solutions, working with a varied technology stack, and ensuring that our products are functional, efficient, reliable, and scalable. By joining us, you're not just choosing a job; you're aligning with a vision that values the human side of tech, where your skills and passion are recognized, nurtured, and celebrated. What We're Looking For • Extensive experience in Azure infrastructure or cloud engineering roles • Proficiency in Infrastructure as Code (IaC) using Bicep and ARM templates; Terraform is a strong plus • Experience provisioning and managing Azure services such as ACA, APIM, FHIR, Cosmos DB, Key Vault, and Storage • Experience with GitHub Actions for CI/CD pipelines and environment promotion • Strong knowledge of Azure Monitor, Application Insights, and Log Analytics for observability • Familiarity with Azure Policy and Microsoft Defender for Cloud for governance and compliance • Experience with multi-region deployment and failover configuration • Knowledge of Azure Front Door or Traffic Manager for global traffic routing and health probes • Ability to configure Log Analytics workspaces, diagnostic settings, retention policies, and alerting mechanisms • Experience with Azure Cost Management, including setting up budget alerts • Ability to create dashboards using Kusto Query Language (KQL) • Experience with Terraform testing frameworks such as Terratest • Experience designing and managing hub-and-spoke Virtual Network (VNet) architectures • Proficiency with Private Link, Private DNS Zones, Azure DNS Resolver, and Hybrid Connections • Hands-on experience with VPN Gateway configuration, BGP routing, Azure Firewall, and DDoS Network Protection • Ability to define Network Security Group (NSG) rules at the subnet level • Experience configuring DNS for private endpoints (e.g., privatelink.servicebus.windows.net, privatelink.documents.azure.com) • Knowledge of Azure Virtual WAN and ExpressRoute design and deployment Our Commitment to You: • 100% Remote • USD above-average salaries • Profit Sharing Policy • Unlimited PTOs after your first year (20 PTOs the first year) • Equipment for your setup • Great work/life balance • Honest, simple, and transparent culture • US-based clients and international teams Everyone has a story. We're eager to hear yours and help you write the next chapter. Are you ready for a change? #Wearethechange! Apply tot his job