Lead Cloud Infrastructure Engineer (Azure & AWS)

About the role

Creative Chaos is seeking a Lead Cloud Infrastructure Engineer to define and drive modern cloud standards across Azure and AWS. The role focuses on infrastructure, platform governance, reliability and technical leadership, working closely with DevOps and software teams.

Key responsibilities

• Own the target‑state hybrid cloud architecture and roadmap, defining reference designs, landing zones, network and identity patterns.
• Lead design and implementation of secure cloud networking (VNets/VPCs, VPN, ExpressRoute/Direct Connect, Private Link, load balancers, WAF).
• Establish cloud governance foundations including subscriptions, RBAC, naming, tagging, budgets and policy guardrails.
• Ensure platforms remain on supported versions, implement drift detection, and build observability with Azure Monitor, Log Analytics, CloudWatch and OpenTelemetry.
• Develop and maintain backup/DR posture with tested RTO/RPO, runbooks and regular exercises.
• Drive FinOps discipline through cost allocation, rightsizing, reservations and anomaly detection.
• Implement security controls, manage SIEM onboarding and lead incident response for infrastructure events.
• Provide technical leadership for core Wintel services (Windows Server, AD DS, DNS/DHCP, PKI) and guide virtualization/storage teams toward cloud‑aligned standards.
• Mentor engineers, run knowledge sessions and codify standards into reusable patterns.

Required profile

• Strong enterprise infrastructure background with Wintel core (Windows Server, AD, DNS/DHCP, certificates).
• Hands‑on production experience in Azure, including networking, identity, monitoring and backup/DR.
• Working knowledge of AWS production environments and basic security/IAM concepts.
• Proven troubleshooting and incident leadership across OS and network layers.
• Automation mindset with strong PowerShell scripting; Bash or Python a plus.

Required skills

• Azure (VNets, VPN, ExpressRoute, Private Link, Azure Monitor, Log Analytics, App Insights, Azure Policy, Defender for Cloud).
• AWS (VPC, IAM, CloudWatch, AWS Config, GuardDuty, Control Tower, CloudFormation).
• Wintel services (Windows Server, Active Directory, DNS, DHCP, PKI, Entra ID).
• Virtualization/storage (VMware, Hyper‑V, SAN).
• Scripting/automation (PowerShell, Bash, Python).
• Infrastructure‑as‑Code (Terraform, Bicep preferred).
• Observability tools (OpenTelemetry, Microsoft Sentinel, Splunk).
• Security and governance (Conditional Access, PIM, Zero Trust, landing zone tooling).
• Container platforms (AKS, EKS) and CI/CD concepts.