Senior Infrastructure / Cloud Engineer
About the role
About the Role
Senior Infrastructure/Cloud Engineer
Key Responsibilities
- Own the architecture, administration, and hardening of
Linux and Windows
server environments across the organization.
- Design and govern
network security architecture
- firewalls, forward/reverse proxies, DMZ zones - ensuring alignment with enterprise security standards.
- Lead the development of
Infrastructure-as-Code
Terraform
modules for scalable, repeatable provisioning.
- Architect and build advanced
Python-based automation
frameworks to reduce manual operations and improve reliability.
- Drive deployment strategy and lifecycle management for applications across environments, ensuring high availability and performance.
- Lead design, scaling, and troubleshooting of
Kubernetes
clusters in production environments, including capacity planning and incident response.
- Own administration and governance of
container registries (Harbor)
- including image lifecycle policies, RBAC, and integration with vulnerability scanning pipelines.
- Architect and manage
Microsoft Azure
infrastructure (networking, compute, storage, identity) with a focus on scalability, cost optimization, and security.
- Lead
vulnerability remediation
OS kernel patching
Java JDK
version/patch management - establishing proactive patch management processes.
- Drive root-cause analysis for critical infrastructure incidents and lead post-incident reviews.
- Mentor and provide technical guidance to junior and mid-level engineers.
- Partner with security, application, and DevOps teams to define infrastructure standards, compliance posture, and best practices.
- Evaluate new tools/technologies and make recommendations to improve infrastructure maturity.
- Create and maintain high-quality documentation, architecture diagrams, and runbooks.
Operating Systems
- Deep expertise in both
Linux
Windows Server
Networking & Security
- Strong command of networking fundamentals,
firewalls
forward and reverse proxies
DMZ
architecture design.
- Proven experience securing enterprise network environments and troubleshooting complex network issues.
Automation & Scripting
- Advanced, hands-on experience writing and architecting
Terraform
modules for multi-environment provisioning.
- Strong proficiency in
Python
Containers & Orchestration
- Deep, production-grade experience with
Kubernetes
- cluster architecture, scaling, troubleshooting, and operations at scale.
- Proven experience administering
container registries
Harbor
Cloud
- Strong, hands-on
Microsoft Azure
Security & Patching
- Proven track record remediating
OS kernel vulnerabilities
at scale.
- Strong experience managing
Java JDK patch/version
lifecycles across environments.
- Experience building or improving vulnerability management/patch management processes.
Leadership & Soft Skills
- Proven ability to mentor junior engineers and lead technical initiatives.
- Strong stakeholder communication and ability to influence technical direction.
- Excellent documentation and process-ownership skills.
- Ability to work independently and drive projects from design through execution.
Preferred Qualifications
- Certifications:
Azure Solutions Architect Expert
CKA/CKAD
Terraform Associate
, or equivalent.
- Experience in regulated, enterprise, or large-scale environments with strict compliance/security requirements.
- Experience with CI/CD pipelines (Jenkins, GitLab CI, Azure DevOps) and GitOps practices.
- Exposure to monitoring/observability tools (Prometheus, Grafana, ELK, etc.).
- Prior experience leading infrastructure migrations or cloud modernization projects.
Experience Required
8–12 years
3+ years in a senior/lead capacity
What Cencora offers
Affiliated Companies
Equal Employment Opportunity
Not included in the source posting: about the role.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.