Principal Cloud Engineer

RESPONSIBILITIES:
Kforce has a client that is seeking a Principal Cloud Engineer in Grapevine, TX.

Key Responsibilities:
* Architect and maintain enterprise Azure Landing Zone implementations including management groups, policy governance, and subscription vending strategies
* Design hub-and-spoke network topologies with Azure Firewall Premium, VPN gateways, ExpressRoute, and Private Link integration for hybrid connectivity
* Establish Infrastructure as Code standards using Terraform, including module development, state management strategies, and drift detection mechanisms
* Lead the design of multi-region disaster recovery architectures leveraging Azure Site Recovery, geo-redundant storage, and automated failover orchestration
* Define and implement Azure Policy and Governance frameworks ensuring compliance with CIS Microsoft Azure Foundations Benchmark and regulatory requirements
* Architect identity and access management solutions using Microsoft Entra ID, Privileged Identity Management (PIM), and RBAC strategies across platform and application landing zones
* Design and implement CI/CD pipeline architectures using Azure DevOps with security gates, automated testing, and approval workflows
* Lead platform observability strategy including Log Analytics Workspace design, diagnostic settings, Azure Monitor alerting, and centralized audit logging
* Collaborate with data engineering teams on Data Platform Landing Zone architecture including Microsoft Fabric integration and analytics infrastructure
* Facilitate integration of modern identity providers (e.g., Auth0 Customer Identity Cloud, Entra ID) with application workloads
* Provide technical leadership and mentorship to cloud engineering teams, establishing coding standards, review processes, and knowledge sharing practices
* Collaborate with security teams on vulnerability management, security posture assessment, and incident response planning

REQUIREMENTS:
* 10 years of cloud platform engineering experience required
* Experience architecting and implementing Azure Landing Zones following Microsoft Cloud Adoption Framework
* Experience with Infrastructure as Code using Terraform at enterprise scale including module development and state management
* Deep knowledge of Azure networking including Virtual Networks, Azure Firewall, VPN Gateway, ExpressRoute, Private Link, and DNS architecture
* Experience implementing Azure Policy and Governance at scale across management group hierarchies
* Experience with Microsoft Entra ID, Privileged Identity Management, Conditional Access, and enterprise RBAC patterns
* Experience designing CI/CD pipelines in Azure DevOps with YAML templates and secure deployment patterns
* Strong understanding of security frameworks including CIS Benchmarks, Zero Trust architecture, and defense-in-depth strategies
* Experience with Azure monitoring and observability including Log Analytics, Azure Monitor, and diagnostic configuration
* Experience with container technologies including Azure Container Apps, Azure Kubernetes Service, and container registry patterns
* Technically proficient with Infrastructure as Code: Terraform, ARM Templates, Bicep
* Technically proficient with CI/CD: Azure DevOps, GitHub Actions
* Technically proficient with Scripting: PowerShell, Bash, Python
* Technically proficient with Operating Systems: Linux, Windows Server
* Technically proficient with Containers: Docker, Azure Container Apps, Kubernetes
* Technically proficient with Monitoring: Azure Monitor, Log Analytics, Grafana, Application Insights
* Technically proficient with Version Control: Git, Azure Repos
* Technically proficient with Collaboration: Confluence, Jira, ServiceNow
* Experience with Azure Data Platform services including Microsoft Fabric, Azure Data Factory, or Azure Synapse preferred

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.