THIS IS A REMOTE POSITIOIN
Position SummaryThe Principal Azure Cloud Solutions Engineer serves as a senior technical authority responsible for designing, implementing, and improving secure, scalable, and resilient solutions on Microsoft Azure. This role combines solution architecture with hands-on engineering to support cloud adoption, application modernization, infrastructure automation, and operational excellence.
As a principal individual contributor, this engineer leads complex technical initiatives, establishes engineering standards, mentors other engineers, and partners with business and technology leaders to translate organizational priorities into practical cloud solutions.
Key Responsibilities:Cloud Solutioning and Engineering- Design and implement secure, scalable, resilient, and cost-effective Azure solutions aligned with business objectives and enterprise architecture standards.
- Design, implement, and continuously improve Azure landing zones, management group and subscription structures, resource organization, and PaaS/IaaS Resources.
- Engineer solutions across Azure compute, storage, networking, identity, containers, and platform services; ensuring integration, reliability, and operational supportability.
- Evaluate architectural alternatives and technical tradeoffs, establish reusable engineering patterns, and document solution designs, technical decisions, dependencies, and operational requirements.
- Partner with application development, infrastructure, and security teams to guide cloud service selection, application architecture, and modernization strategies.
Automation and Platform Delivery- Develop and maintain reusable Infrastructure as Code using Terraform.
- Build and improve CI/CD pipelines for infrastructure deployment, configuration validation, and controlled promotion across environments.
- Automate provisioning, configuration, updates, monitoring, and routine operational tasks.
- Establish source control, code review, testing, and documentation practices for cloud engineering.
- Create standardized deployment patterns that help teams deliver solutions consistently and efficiently.
Security and Governance- Integrate security into solution designs, including identity, privileged access, network segmentation, encryption, secrets management, and logging.
- Implement governance through Azure Policy, role-based access control, resource standards, and automated compliance checks.
- Partner with cybersecurity and risk teams to address vulnerabilities, remediate findings, and support audit requirements.
- Design and engineer secure connectivity between Azure, on-premises infrastructure, and external services, incorporating private connectivity and network isolation.
- Apply least-privilege access and Zero Trust principles throughout the cloud environment.
Reliability, Operations, and Cost Management- Define observability standards for metrics, logs, traces, dashboards, and actionable alerts.
- Lead technical troubleshooting for complex cloud incidents and drive root cause analysis and corrective actions.
- Improve service reliability, capacity, performance, and operational readiness.
- Identify cost optimization opportunities through right-sizing, resource lifecycle management, consumption analysis, and appropriate purchasing models.
- Develop operational runbooks and ensure solutions can be supported effectively after implementation.
Technical Leadership and Collaboration- Lead engineering solution reviews for complex or high-impact initiatives.
- Establish technical roadmaps, reference architectures, and reusable engineering patterns.
- Mentor engineers and strengthen technical capabilities across teams.
- Communicate technical options, risks, costs, and recommendations to technical and business stakeholders.
- Collaborate with application development, networking, security, data, operations, vendors, and other internal teams.
- Evaluate emerging Azure capabilities through focused proof of concepts and recommend adoption based on demonstrated value.
PHYSICAL DEMANDS AND WORKING CONDITIONS: The physical demands and work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
EDUCATION: Bachelor's Degree required; Advanced Degree preferred
EXPERIENCE AND REQUIRED SKILLS: - Required Qualifications
- Extensive experience in infrastructure, platform, or systems engineering, typically including 10 or more years in technology and 5 or more years designing and implementing Azure solutions.
- Demonstrated success leading complex enterprise cloud initiatives from design through production operations.
- Deep technical expertise across Azure infrastructure and platform services, including compute, storage, networking, identity, security, and governance.
- Strong experience with Microsoft Entra ID, Azure RBAC, managed identities, and privileged access controls.
- Advanced knowledge of Azure networking and hybrid connectivity, including virtual networks, routing, DNS, firewalls, load balancing, and private service connectivity.
- Proficiency with Infrastructure as Code (IaC) using Terraform, along with scripting with PowerShell, Python, or Azure CLI.
- Experience with Git-based workflows and CI/CD platforms such as GitHub Actions or Azure DevOps.
- Experience implementing monitoring, backup, disaster recovery, and incident response capabilities.
- Ability to assess technical tradeoffs and balance business needs with security, reliability, operational complexity, and cost.
- Proven ability to independently investigate and resolve complex technical issues spanning multiple Azure services, infrastructure components, and application dependencies.
- Strong written communication, technical documentation, stakeholder engagement, and mentoring skills.
- Bachelor's degree in computer science, information technology, or a related field, or equivalent practical experience.
- Microsoft Certified: Associate-level certification or higher.
Preferred Qualifications- Hands-on experience with Azure platform services, including App Service, Azure Functions, API Management, and messaging or event-driven integration services.
- Experience designing, implementing, or supporting Azure Kubernetes Service (AKS), containerized workloads, and cloud-native application architectures.
- Experience supporting enterprise data, analytics, or Microsoft Foundry and other AI platforms, including the infrastructure, networking, identity, and security.
- Practical experience applying the Microsoft Cloud Adoption Framework and Azure Well-Architected Framework to enterprise cloud operations.
- Experience engineering cloud solutions in regulated environments, including implementing technical controls to meet security, compliance, and audit requirements.
- Familiarity with site reliability engineering (SRE), platform engineering, and FinOps practices to improve service reliability, operational efficiency, and cost management.
- Experience designing and supporting shared cloud platform services across complex enterprise environments, including hybrid infrastructure, multiple subscriptions, and organizational boundaries.
- Microsoft Certified: Expert or Specialty certification.
Success Measures- Secure, reliable Azure solutions that meet agreed business and technical requirements.
- Increased use of reusable infrastructure as code and automated deployment processes.
- Measurable improvements in platform reliability, deployment efficiency, and cloud cost management.
- Reduced configuration drift, recurring incidents, and unresolved security findings.
- Clear architecture documentation and effective operational handoffs.
- Stronger engineering capability through mentorship, standards, and cross-team collaboration.
The rate of pay for this position will depend on the successful candidate's work location and qualifications, including relevant education, work experience, skills, and competencies.
Annual Rate: $137,000.00 - $229,000.00
Benefit Overview: This position offers a comprehensive benefits package including medical, dental, and vision insurance, a 401(k) with company match, paid time off, parental leave and potential for performance-based bonuses depending on company and individual performance.
Fresenius Medical Care is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sexual orientation, gender identity, parental status, national origin, age, disability, military service, or other non-merit-based factors
