[Remote] Engineer, Cloud - Archimedes

Note: The job is a remote job and is open to candidates in USA. Navitus Health Solutions is the industry leader in specialty drug management solutions, aiming to transform the PBM industry. The Engineer, Cloud specializes in architecting and automating secure, scalable Azure environments, supporting enterprise data platform initiatives and ensuring high availability and security of cloud infrastructure for analytics and AI workloads.ResponsibilitiesArchitect and deploy solutions using core Azure services, including Azure App Services, AKS, Azure SQL, Storage Accounts, Application Gateway, Azure Front Door, and Load BalancersDesign and deploy scalable, secure solutions using core Azure services including App Services, AKS, Azure SQL, Storage Accounts, Application Gateway, Azure Front Door, Load Balancers, and related PaaS/IaaS componentsDesign, implement, and support cloud infrastructure and networking services that enable Azure Data Lake Storage Gen2, Azure Databricks, analytics platforms, and AI workloadsCollaborate with Data Engineering and DevOps teams to establish secure, scalable, and automated cloud foundations for lakehouse architectures, data pipelines, and enterprise analytics platformsImplement private networking, identity management, access controls, encryption, monitoring, and governance controls supporting Azure Databricks, Data Lake Storage, and related analytics servicesSupport cloud infrastructure and platform services utilized for machine learning, generative AI, intelligent automation, analytics, and data science workloadsAssist with deployment, configuration, monitoring, and operational support of Azure AI and analytics services including Azure Databricks, Azure Machine Learning, Azure OpenAI, Cognitive Services, and related cloud-native technologiesSupport implementation of cloud networking, security, identity, governance, and compliance controls required for AI, analytics, and machine learning environmentsCollaborate with Data Engineering, DevOps, and Software Engineering teams to support AI platform infrastructure, model deployment environments, analytics platforms, and automation solutionsMonitor performance, utilization, security posture, and operational health of cloud infrastructure supporting AI and advanced analytics workloadsAdd to ExperienceSupport deployment and operation of Azure Databricks workspaces, Unity Catalog integrations, managed identities, private endpoints, and secure service connectivity across cloud environmentsPartner with Data Engineering teams to optimize cloud infrastructure supporting data ingestion, transformation, storage, analytics, and machine learning workloadsAutomate infrastructure provisioning with reusable, version-controlled modules using Terraform, Bicep, and ARM templates, with standardized reusable modules and GitOps practices using Azure DevOps PipelinesDesign scalable Virtual Network (VNet) architectures, including VNet peering, Private Endpoints, Service Endpoints, User Defined Routes (UDRs), Network Security Groups (NSGs), Azure Firewall, and ExpressRoute/VPN Gateway integrationsManage hybrid workloads, supporting both Azure-native and lift-and-shift workloads across IaaS and PaaS resourcesDevelop and maintain infrastructure automation scripts using Azure CLI, PowerShell, and PythonImplement and enforce tagging policies, naming standards, resource locks, and subscription-level policies using Azure Policy and Management GroupsConfigure and monitor autoscaling, high availability, zone redundancy, and backup/restore for critical services across production and non-production environmentsDevelop automation tooling using Azure CLI, PowerShell, and Python to streamline provisioning, governance, and operational workflowsImplement governance frameworks using Azure Policy, Management Groups, resource locks, tagging policies, and naming conventions for enterprise-scale environmentsConfigure high availability and performance features, including autoscaling, zone redundancy, backup and disaster recovery across all critical environmentsLead cost management efforts through Azure Cost Management, budget tracking, right-sizing recommendations, Reserved Instances, and cost anomaly detectionServe as Tier 2 escalation for complex infrastructure incidents and requests, working closely with operations and support teamsAdopt ITSM best practices, contributing to incident, problem, and change management workflows using Jira Service Management or equivalent toolsDrive cost optimization using Azure Cost Management, budgets, recommendations, and Reserved Instance planningAct as a Tier 2 escalation point for cloud infrastructure and platform-related incidents and service requestsManage cloud identity and access using Microsoft Entra ID (formerly Azure Active Directory), including configuration of user roles, enterprise applications, and secure authentication policiesImplement secure external identity integrations using Entra B2B (guest access) and Entra B2C (customer identity), including custom policies, user flows, and application federationAdminister Microsoft Intune for mobile device management (MDM) and mobile application management (MAM), enforcing compliance policies, conditional access, and device posture assessmentsLeverage ITSM best practices to support incident, change, and problem management processesCollaborate with IT and DevOps teams via Jira Service Management and ticketing systems to track work, escalate issues, and drive resolutionAssist in root cause analysis, change approvals, and cross-functional resolution of infrastructure-related production issuesMaintain knowledge base documentation, FAQs, and standard operating procedures for service desk support alignmentSet up and tune observability tools including Azure Monitor, Log Analytics, Application Insights, Network Watcher, and Connection MonitorDevelop Kusto Query Language (KQL) dashboards for operational visibility and alertingSupport incident response and RCA using Activity Logs, Diagnostics Settings, and Change AnalysisImplement secure identity and access management using Azure Active Directory, RBAC, Privileged Identity Management (PIM), Conditional Access, and Managed IdentitiesSecure secrets and certificates using Azure Key Vault with access policies and key rotationSupport SSO and OAuth2/OpenID Connect configurations for internal and external applications registered in Entra ID, managing permissions, scopes, and consent frameworksConfigure Microsoft Defender for Cloud, Azure Security Center, Just-in-Time VM Access, and Sentinel integrations for threat detection and responseApply best practices aligned to the Azure Security Benchmark and Well-Architected FrameworkEnsure infrastructure compliance for regulatory standards such as HIPAA, SOC 2, and ISO 27001, and maintain an audit-readiness postureParticipate in, adhere to and support compliance, people and culture, and learning programsPerform other duties as assignedSkillsBachelor's degree or equivalent work experience required5+ years of experience in cloud infrastructure, systems engineering, or SRE roles focused on Azure requiredDeep experience with Azure resource design, automation, and deployment strategies using Terraform, Bicep, and/or ARM requiredProficient in scripting with PowerShell, Azure CLI, or Python for automation and diagnosticsStrong understanding of Azure networking, firewalls, DNS, load balancing, and hybrid connectivity solutions requiredHands-on experience with Azure-native observability tools and ability to craft KQL-based dashboards and alerts requiredSolid grasp of RBAC, identity federation, Key Vault, and platform security controls requiredFamiliarity with governance structures including Management Groups, Blueprints, and Policy Definitions requiredMicrosoft certifications such as Azure Solutions Architect Expert, Azure Administrator Associate, or Azure Security Engineer Associate preferredExperience supporting Azure Data Lake Storage Gen2, Azure Databricks, lake house architectures, and enterprise analytics platforms preferredFamiliarity with data platform security, data governance controls, Unity Catalog, private connectivity patterns, and cloud-native analytics architectures preferredFamiliarity with cloud infrastructure supporting machine learning, artificial intelligence, analytics, or data science workloads preferredExposure to Azure Machine Learning, Azure OpenAI, Cognitive Services, Databricks ML, MLflow, or similar AI and analytics platforms preferredUnderstanding of cloud security, governance, networking, and operational considerations supporting AI and machine learning environments preferredExperience supporting AKS, Azure Functions, or containerized workloads in production preferredFamiliarity with DevSecOps pipelines using Azure DevOps, integrating security, compliance, and testing stages preferredExperience with Zero Trust architecture, Microsoft Entra, and Conditional Access Policies preferredBenefitsTop of the industry benefits for H ealth, D ental, and V ision insurance20 days p aid t ime o ff4 weeks paid parental leave9 paid holidays401K company match of up to 5% - No vesting requirementAdoption Assistance ProgramFlexible Spending AccountEducational Assistance Plan and Professional Membership assistanceReferral Bonus Program – up to $750!Company OverviewNavitus Health Solutions LLC is a full service, URAC-accredited pharmacy benefit management company. It was founded in 2003, and is headquartered in Appleton, Wisconsin, USA, with a workforce of 1001-5000 employees. Its website is https://www.navitus.com/.