Senior Cloud Engineer

About Vector Airport Systems

Vector Airport Systems is an established international aviation software and services company with a positive team culture and an emphasis on visionary Leadership. Our hard-working, innovative team delivers aircraft tracking, revenue generation, and mission-critical SaaS solutions to our clients.

As our business continues to grow, we are seeking an experienced Senior Cloud Engineer to support and enhance the cloud infrastructure behind our products and services.

About the Position

The Senior Cloud Engineer will lead the Azure infrastructure and delivery pipelines supporting software used across 150+ airports worldwide.

This role is responsible for managing cloud migrations across tenants and subscriptions, modernizing legacy .NET and Windows workloads into current Azure services, and building and maintaining the CI/CD pipelines our engineering teams rely on every day.

The position serves as a senior technical resource for how we build, deploy, secure, and operate our platform. This individual will work closely with engineers, architects, and leadership to support infrastructure decisions through implementation and production, helping ensure our systems remain scalable, secure, and reliable.

This is a hands-on role with broad visibility and the opportunity to make a direct impact across our technology environment.

Key Responsibilities

Cloud Infrastructure & Platform Management

• Design, build, and manage Azure infrastructure including App Services, VNets, DNS, Private Endpoints, Key Vault, and Storage supporting production airport operations
• Manage and optimize Azure SQL and SQL Server VM environments, including backups, HA/DR planning, performance monitoring, and secure connectivity
• Administer Windows Server and IIS environments where legacy workloads remain and support migration to App Services, containers, or other managed solutions
• Build monitoring and observability across the platform using Azure Monitor, Log Analytics, and Application Insights to support data-driven operational decisions

DevOps Automation & Delivery

• Design, maintain, and improve CI/CD pipelines in Azure DevOps and GitHub Actions for .NET/C# applications, including build, testing, artifact management, and multi-environment deployments
• Establish and maintain Infrastructure as Code standards using Bicep, Terraform, or ARM templates
• Partner with application engineers on release strategy, branching, environment promotion, and production readiness

Security, Compliance & Governance

• Strengthen security through RBAC, network controls, secrets management, patching, and cost governance across multiple subscriptions and tenants
• Set the security bar for how we run in Azure: least-privilege RBAC, segmented networks, Private Endpoints, secrets in Key Vault, and managed identities instead of static credentials.
• Oversee vulnerability management, including patch schedules, dependency and image scanning, and ensuring identified findings are properly addressed and resolved - not simply documented
• Build security into CI/CD pipelines through secret scanning, SAST/DAST, signed artifacts, and policy-based controls to prevent high-risk or unauthorized changes from reaching production
• Lead SOC 2 compliance efforts and customer security reviews by maintaining documentation, keeping evidence current, managing technical controls, and reducing administrative burden on the engineering team

Technical Leadership & Operational Excellence

• Serve as a senior technical resource for infrastructure decisions, while supporting documentation, mentoring, and operational best practices
• Identify opportunities to improve system reliability, security, performance, and operational efficiency, and lead those improvements through implementation

Required Qualifications

• 6+ years of experience in DevOps, SRE, or Cloud Engineering roles, with at least 3 years focused on Microsoft Azure
• Proven ownership of production CI/CD pipelines in Azure DevOps or GitHub Actions, including designing pipelines from the ground up rather than only maintaining existing templates
• Strong hands-on experience deploying and supporting .NET / C# applications across development, test, and production environments
• Strong knowledge of Azure networking including VNets, NSGs, Private Endpoints, DNS (public and private), and VPN/ExpressRoute fundamentals
• Production experience with SQL Server and Azure SQL, including deployment, performance tuning, backup and recovery, and secure access practices
• Proficiency with at least one IaC tool (Bicep, Terraform, or ARM) used in production environments
• Strong scripting skills in PowerShell and Bash, with a focus on automating repetitive operational tasks
• Strong troubleshooting skills across infrastructure, networking, Windows Server, IIS, application, and database layers
• Working knowledge of Azure security fundamentals including Entra ID, RBAC, network security, encryption in transit and at rest, and how secrets are stored and rotated
• Experience building CI/CD pipelines that securely manage secrets, control deployment access, protect artifact integrity, and maintain clear environment separation
• Familiarity with security frameworks such as CIS, NIST, OWASP Top 10, or Microsoft Cloud Security Benchmark, with practical experience applying those standards in production environments

Vector Workplace

We strive to be a terrific place to work, emphasizing teamwork, initiative, and results. The doors of Senior Leadership are always open. In additional to our benefits program, we are proud to offer a workplace with:

• Generous rewards for hard work and dedication.
• Leadership takes a constructive interest in every team member’s success.
• Our cultural focus on people and results - not bureaucracy and arbitrary rules.
• Work/Life Balance is respected and encouraged.
• Be part of a team that enjoys time together and helps each other succeed.
• You will not be micromanaged: Plan, prioritize, and schedule your own tasks.

How To Apply

To be considered for the position, please follow the instructions below carefully. Applicants that do not meet these requirements may not be considered.

1. Apply directly through our official application link provided in this posting
2. Resume File Naming: The file name of your resume should be your last name, first name, and requisition ID #2632 in the following format:
   • LastName_FirstName_ID2632
3. Application Completion: Please complete the application in full to be considered for the position. While we understand AI tools have become a useful resource, all application submissions must reflect your own experience, knowledge, and communication style.