Cloud Engineer

Designs, plans, manages, maintains and supports one or more cloud computing applications, services and public, private, and hybrid cloud architecture platforms. Focuses on the design, implementation, and ongoing enhancment aspects of assigned platforms. Typically, coordinates with other engineers and teams for support and maintenance of platforms and services.

Job Duties and

Responsibilities

• Owns access and credential requests for AI workloads end to end: service accounts, API keys, Entra app registrations, vendor credentials, and network/egress paths. Drives them through Identity, Network, Security, Data & Integration, and vendor security teams, tracks each to closure, and lands the results in Key Vault with rotation.
• Builds and runs the deployment pipeline for agent applications on the approved patterns (Azure Container Apps, App Service, Container App Jobs): container image builds and registry pushes, Bicep and infrastructure as code, promotion from dev to UAT to production, rollbacks, and the change records CAB requires.
• Operates what the team has shipped: the compliance-log puller, OpenTelemetry collector and Sentinel ingestion pipeline, MCP servers and connectors, and scheduled jobs. Owns uptime, patching, upgrades, log access, and first-line diagnosis; hands code defects to the engineers with the evidence attached.
• Administers the team's developer platform: the GitHub organization (teams, rulesets, security scanning), Claude Code and Cowork fleet configuration (managed settings, version pinning, certificate and proxy setup), and onboarding and offboarding of engineers and citizen developers.
• Monitors consumption, quotas, and cost across the Anthropic platform and Azure AI services; maintains the usage and spend reporting behind the value and cost reviews; works reliability and connectivity incidents with the network and CASB teams.
• Keeps the runbooks, environment inventory, and access map current so any engineer can see what exists, who owns it, and how to reach it.
• Designs, builds and implements cloud environments and components in accordance firm security guidelines and business needs.
• Uses knowledge and experience to integrate platforms and services using best practices.
• Migrates complex multi-tier application to/from cloud platforms.
• Implements cost-control strategies as required.
• Leverages orchestration and automation techniques to drive efficiency.
• Provides Tier 3 and root cause analysis support for technical issues within support platform and services.
• Each team member is expected to be aware of risk within their functional area. This includes observing all policies, procedures, laws, regulations and risk limits specific to their role. Additionally, they should raise and report known or suspected violations to the appropriate Firm authority in a timely fashion.
• Performs other related duties as required.

The information on this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job

Pinnacle is an Equal Opportunity Employer committed to fostering an inclusive work environment.