Cloud Engineer
Own and scale the Azure cloud infrastructure for a new AI-native data integration platform, managing AKS, networking, CI/CD, and security from the ground up.
- Compensation
- $110K–$160K / yr
- Location
- Boston
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Devops
- Posted
Skills
Must have
- 5+ years DevOps, SRE, or cloud infrastructure engineering in SaaS environments
- Production infrastructure ownership (own outcomes, not just contributions)
- Deep Azure expertise (AKS, Azure DevOps, Azure Networking, Key Vault, Azure Monitor)
- Terraform for infrastructure-as-code
- Kubernetes cluster management, networking, RBAC, security hardening
- CI/CD pipeline design (GitHub Actions or Azure DevOps)
- Container security (image scanning, runtime security, secrets management)
- Azure networking (VNet design, private endpoints, DNS, firewall rules)
Nice to have
- SOC 2 or PCI-DSS compliance experience
- Azure security certifications (AZ-500, AZ-104) or equivalent (CISSP, CKS)
- Financial services or compliance-sensitive infrastructure background
- Experience with data encryption at scale (Azure Key Vault, envelope encryption)
- AWS familiarity
- Terraform modules and reusable infrastructure patterns at scale
Full description
At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career.
About Us
We are on a mission to rebuild how financial services firms create, manage, and execute their data integrations and transformations. Today that process stretches across multiple teams, tools, and handoffs - slow to build, expensive to maintain, and nearly impossible to change. We collapse it into a single AI-native platform that business users can operate without writing a ticket, while engineering teams retain the governance and security controls they require. We're growing our founding team now.
About the Role
Our Cloud Engineer will own the infrastructure the entire platform runs on. This is a broad ownership role: cloud infrastructure on Azure, CI/CD pipelines, Kubernetes cluster management, security controls, and cost optimization - all under one remit.
This is not a compliance-first security role. It is a cloud infrastructure role where security is a core engineering discipline built into everything, not layered on at the end. You'll work closely with platform engineering to ensure the environment is reliable, observable, and built to scale - and you'll give the rest of the engineering team the confidence to ship quickly because the foundation they're building on is solid.
You'll be one of the first cloud infrastructure hire, which means greenfield decisions and real ownership from day one.
Responsibilities
Infrastructure
- Design, deploy, and manage cloud infrastructure on Azure using Terraform and GitOps practices
- Own the networking layer - VNets, Subnets, private endpoints, and DNS configuration
- Manage Azure resource organization, identity, and access management
- Monitor and optimize cloud spending while maintaining performance and reliability
CI/CD & Developer Experience
- Build and maintain CI/CD pipelines with automated testing, security scanning, and deployment automation
- Primary tooling: Azure DevOps and/or GitHub Actions
- Work with engineering teams to ensure deployment workflows support fast, safe iteration
- Manage environment configuration and secrets (Azure Key Vault)
- Kubernetes & Containers
- Manage AKS (Azure Kubernetes Service) cluster configuration, scaling, and lifecycle
- Implement container security hardening, network policies, and RBAC
- Establish patterns for workload deployment, resource management, and observability