Cloud Governance Engineer - Azure @ CDK Global

Role:

• Responsible for maintaining theAzure Platform architecture supporting CDK Public Cloud Governance and product/application adoption

• Design/Development of Azuregovernance solutions (managing security, cost optimization and tech debt)

• Develop/maintain/implement cloud platform standards (IAM, tagging, security,account management, networking, DR, database, etc.)

• Support product development teams and infrastructure teams in the implementation of governance solutions (security, cost optimization, etc.)

• Maintain minimum application deployment standards (governance, cost management and tech deb perspective). Work with infrastructure technical leads to develop and maintain domain standards (database, networking, compute, security, messaging, etc.)

• Work with Security to define security requirements and controls, design and implement solutions (exDefender, Sentinel, Azure Key Vault,etc.) to support overall security of the CDK AWS environment.

• Work with Infrastructure engineering teams to ensure standards and reference solutions are develop with respect to the domain areas (Data Protection, Disaster Recovery, etc.)

• Analyzing complex business and software requirements leading to the selection and implementation of appropriate technical public cloud solutions (ex Secrets Management, Messaging, etc.).

• Ensuring the software and development requirements align to the defined public cloud infrastructure service standards

• Ensure architecture, process, standards and best practice documentation is current

• Optimizing and tuning designs based on performance and root cause analysis

• Analysis of existing solutions alignment to infrastructure standards and providing feedback to both evolve and mature the solution.

• Utilizing your experience and skillset to influence and guide the Infrastructure Services Roadmap

• During cloud operational issues, assist procuct and operational teams to identify root cause and recommend remediation activities.

Essential Skills & Experience:

• This is a hands-on role where the candidate is expected to take on technical tasks where in depth knowledge on usage and engineering best practices of AWS/public cloud technologies is important:

• Preferred key experience includes 4-6 years of AWS experience with majority the following AWS services/capabilities:

• Compute/DB: VMs, Azure SQL, SQL Server MI

• Networking: Load Balancing, vNets, Availablity Zones/Regions, WAF/FW, Express Route, Private Link, etc.

• Storage: Block, BLOB, Archive Services, Azure Container Storage, etc.

• Security: Service Control Policies, IAM, Defender, Sentinel, etc.

• Cloud FinOps: Azure Advisor, Cost Management & Billing

• Other: OpenSearch, Backup

• 2-4 years of experience of using data analytics and Azure cost investigative techniques/tools (3rd party FinOps tools, etc.) to identify cost optimization opportunities and working with application teams to achieve those savings identified.

• 3-5 years implementing and managing security controls in an Azure environment. Experience with Azure security capabilities

• 2-3 years development/scripting experience (Python & Java preferred) leveragingAzure CLI/SDK