Infrastructure Cloud Engineer

Arch Capital Group Ltd.

. Design Azure infrastructure architecture for new projects, including networking topology and resource organization .

Posted 10/5/2026full-timeUnited StatesMid-LevelSenior💰 $125,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing Azure infrastructure architecture, including networking, resource organization, and security compliance. Proficient in Infrastructure as Code practices using Terraform or Bicep, with strong documentation and communication skills to support collaborative project execution.

Highest-signal resume keywords

Azure Infrastructure Architecture DesignInfrastructure as Code (IaC) ProficiencyAzure Native Services ExperienceAZ-104 or AZ-305 CertificationNetworking Fundamentals Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Azure ServicesInfrastructure as Code (IaC)TerraformBicepPowerShellPythonWindows Server AdministrationLinux Server AdministrationNetworking (TCP/IP, DNS, VPN)Load Balancing

Soft Skills

Strong Documentation SkillsCommunication SkillsAccountabilityOwnershipProblem-Solving

Tools & Technologies

Azure AD/Entra IDGitHubAzure Well-Architected FrameworkMonitoring ToolsDashboards

Certifications & Qualifications

AZ-104AZ-305

Industry Keywords

Regulated Industry ExperienceInsuranceFinancial ServicesSOC 2 ComplianceIdentity Governance

Tech Stack

Tools & technologies

AWSAzureCloudDNSFirewallsLinuxPythonTCP/IPTerraform

About the role

Key responsibilities & impact

Design Azure infrastructure architecture for new projects, including networking topology and resource organization
Evaluate Azure services against business requirements and recommend solutions
Produce and maintain architecture diagrams, design documents, and decision records
Assess proposed changes for scalability, resilience, and cost impact
Participate in architecture review sessions with Enterprise Architecture and Service Delivery management
Monitor resource health, utilization, and cost; identify optimization opportunities
Design and build dashboards, scripts, tools, thresholds, alerting, and incident-routing processes
Troubleshoot infrastructure issues and produce root-cause analyses and remediation specifications
Design and maintain VNets, subnets, peering, ExpressRoute/VPN, load balancers, and firewalls
Design and maintain DNS and hybrid connectivity between on-premises and cloud environments in Azure and AWS
Design IAM/RBAC models and least-privilege access structures in Azure AD/Entra ID
Review conditional access policies and access-review processes
Partner with security and compliance on identity governance and regulatory obligations
Ensure architecture designs meet SOC 2 and applicable insurance/financial regulations
Review cloud-resource security posture and recommend remediation
Assist product teams with DevSecOps processes and remediation of findings
Support audits with architecture documentation and evidence
Translate architecture designs into specifications and runbooks for Corporate build teams, including Terraform/ARM/Bicep requirements and pipeline requests
Review Corporate Infrastructure as Code output for correctness

Requirements

What you’ll need

3–5 years in infrastructure, systems administration, or cloud engineering
At least 3 years hands-on experience with Azure native services (compute, storage, networking, Entra ID)
AZ-104 or AZ-305 required
Solid networking fundamentals (TCP/IP, DNS, VPN, load balancing, hybrid connectivity)
Demonstrated 2 years’ experience writing and troubleshooting Infrastructure as Code (IaC)
Experience with Terraform or Bicep
Github in use for infrastructure scripting and IaC
Scripting proficiency in PowerShell or Python for diagnostics and reporting
Experience with Windows/Linux server administration
Experience in a regulated industry (insurance, financial services) preferred
Familiarity with Azure AD/Entra ID governance, conditional access, and PIM preferred
Exposure to Azure Well-Architected Framework preferred
AZ-305 (Azure Solutions Architect) certification preferred
Ability to design solutions independently within a shared build-automation model
Strong documentation and communication skills
Comfortable operating at the design/implementation boundary
Strong accountability and ownership
Ability to take an incident or project to closure

Benefits

Comp & perks

Multiple medical plans plus dental, vision and prescription drug coverage
Competitive 401k with generous matching
PTO beginning at 20 days per year
Up to 12 paid company holidays per year
2 paid days of Volunteer Time Off
Basic Life and AD&D Insurance
Short and Long-Term Disability
Paid Parental Leave of up to 10 weeks
Student Loan Assistance and Tuition Reimbursement
Backup Child and Elder Care
Incentive eligibility