Cloud Engineering Lead

Cloud Engineering Lead | Hedge Fund | $200k–$250k Base + Bonus + Profit ShareA globally respected institutional asset management firm headquartered in San Francisco is looking for a Cloud Engineering Lead to join their IT team at a pivotal moment in how they build and operate infrastructure. This is a hands-on senior individual contributor role, not a manager pushing tickets. You will be responsible for designing, implementing, and evolving a multi-cloud platform anchored in Azure, with production workloads in GCP and AWS. You'll own complex infrastructure from architecture through to delivery, and play a central role in shaping how the firm builds for its next chapter of growth. AI tools are first-class collaborators here. If you're the kind of engineer who uses Claude Code, GitHub Copilot, or similar LLM tooling as a genuine part of how you work and not just dabbles then this environment was built for you.ResponsibilitiesLead design and implementation of cloud infrastructure across Azure (primary), GCP, and AWS, using Terraform and infrastructure-as-code as the primary delivery mechanismOwn and evolve the firm's Azure Landing Zone: hub/spoke networking, VWAN, ExpressRoute, Azure Firewall policy, private endpoint architecture, and DNSBuild and maintain shared platform services — Container Apps environments, ACR, Service Bus, Key Vault, managed identities — that internal development teams depend onDrive IaC quality across the module library: enforce standards, reduce duplication, implement automated testing, and manage Terraform Cloud workspaces and GitOps pipelines via Azure DevOpsIntegrate AI engineering tools (Claude Code, GitHub Copilot, Vertex AI, and similar) into daily workflows for architecture acceleration, code generation, documentation, and operational toolingLead cloud migration and platform modernization initiatives, including application re-platforming to Linux/cloud-native compute and legacy system decommissionsPartner with cybersecurity on cloud security posture: Entra ID governance, Defender for Cloud, Conditional Access policies, MCAS/Defender for Cloud Apps, and IaC security controlsBuild and maintain operational tooling for infrastructure discovery, cost visibility, security posture, and cross-cloud reportingProvide technical mentorship to team members on cloud engineering practices, IaC standards, and AI-assisted development workflowsEnsure cloud infrastructure supports compliance requirements for SEC, SOC 1/2, and NIST frameworksCloud Engineering Lead Required ExperienceBachelor's degree in Computer Science, Information Technology, Engineering, or equivalent experience required; Master's degree a plus10+ years of hands-on IT experience, with at least 5 years focused on cloud engineering at enterprise scaleDeep Terraform expertise: writing production modules, managing Terraform Cloud workspaces, integrating with CI/CD pipelines, and enforcing standards across a teamStrong Azure command across networking (VWAN, ExpressRoute, Azure Firewall, Private Endpoints), compute (VMs, Container Apps, AKS), identity (Entra ID, RBAC, managed identities), and security (Defender for Cloud, Conditional Access, MCAS)Demonstrated, hands-on experience using AI tools — Claude Code, GitHub Copilot, or similar LLM-based development tools — as a regular part of engineering and automation work; ability to discuss specific ways AI has changed how you deliver infrastructureProficiency in Python and/or programming languages for infrastructure automation, operational tooling, and cross-cloud scripting; PowerShell proficiency for Microsoft platform workMulti-cloud fluency: GCP and/or AWS experience alongside primary Azure expertiseExperience with GitOps, Azure DevOps pipelines, self-hosted agents, and container build/promotion patterns (ACR)Strong understanding of network security: zero-trust architecture, private connectivity, ExpressRoute, firewall policy designExperience in institutional asset management, financial services, or another similarly regulated industry strongly preferredExcellent written and verbal communication skills; comfortable driving technical decisions with both engineering peers and executive stakeholdersWillingness to perform occasional after-hours implementation or migration work as required