Cloud Engineer (Azure Platform / IaC)

# Cloud Engineer (Azure Platform / IaC) **Sen Works Viet Nam Co., Ltd.** | | | | --- | --- | | **Job Title** | Cloud Engineer (Azure Platform / IaC) | | **Department** | IT Services – Infrastructure & Cloud | | **Reports To** | Head of Infrastructure / Client Technical Lead [to be confirmed] | | **Employment Type** | Full-time labour contract with Sen Works Viet Nam Co., Ltd.; probation of up to 60 days | | **Work Location** | Vietnam – fully remote | | **Salary Range** | Up to USD3000 gross | 📩 **Apply:** send your CV to [jobs@senworks.com](mailto:jobs@senworks.com) --- ## Role Summary In this role you will be dedicated to a US healthcare services client that operates a growing network of affiliated medical practices. You will work inside the client's Microsoft Azure and Microsoft 365 environment and collaborate daily with the client's US-based teams on systems that store, process or transmit protected health information (PHI). The Cloud Engineer is the principal designer and builder of the client's cloud platform. You will lead cloud architecture, infrastructure as code, platform automation and cloud operations, building the landing zones, guardrails and delivery pipelines that give product, data and integration teams a secure, compliant, cost-effective foundation for PHI workloads. ## Key Responsibilities ### Cloud Architecture & Platform Engineering - Design and implement Azure architecture: landing zones, subscription and tenant structure, identity integration, networking, governance and the platform foundation for Azure Virtual Desktop. - Deliver the platform through infrastructure as code (Terraform or Bicep), policy as code and CI/CD pipelines for infrastructure changes. - Set reference architectures, naming and tagging standards and environment patterns. - Lead migration of on-premises and practice-site workloads to Azure, including dependency mapping, cutover planning and decommissioning. ### Cloud Operations, Reliability & Cost - Lead observability, monitoring, alerting and incident response for cloud platforms; drive root cause analysis and reliability improvements. - Align configuration, identity, encryption, key management and logging with HIPAA, HITRUST and SOC 2 in partnership with Information Security. - Design and test backup, DR and business continuity to meet defined RTO and RPO. - Use cost and utilisation data to right-size resources and apply reservations and savings plans. ### Enablement & Integration - Build reusable modules, pipelines and documentation so teams can deploy compliant workloads without bespoke engineering. - Design secure connectivity and data exchange between cloud, on-premises systems, practice sites and third-party healthcare platforms. - Conduct design and code reviews; define measures for availability, deployment frequency, change success rate and cost efficiency, and report to leadership. ## Qualifications ### Education & Certifications - Bachelor's degree in Computer Science, Information Systems, Engineering or a related field; an equivalent combination of education, certifications and experience will be considered. - **Microsoft Certified: Azure Solutions Architect Expert (AZ-305)** or equivalent expert-level cloud certification required; DevOps, security or networking certifications preferred. ### Experience - 5+ years of infrastructure or platform engineering experience, including at least 4 years designing and operating production workloads in Azure or a comparable public cloud. - Experience leading cloud migrations and greenfield builds, including landing zone design, networking and identity integration. - Proven success improving reliability, deployment velocity and cloud cost efficiency through automation. - Experience building cloud environments that meet HIPAA, HITRUST, SOC 2 or ISO 27001 requirements. - Healthcare, healthcare technology or managed services experience is a strong advantage. ### Knowledge & Skills - Terraform or Bicep with Git-based workflows; Azure DevOps or GitHub Actions. - Azure networking and security: VNets, private endpoints, ExpressRoute/VPN, RBAC, Azure Policy, Key Vault, Defender for Cloud and Entra ID. - Azure Well-Architected Framework and Cloud Adoption Framework. - Containers and orchestration (Docker, Kubernetes, AKS), serverless patterns and SRE practices. - PowerShell, Python or Bash; Azure Monitor and Log Analytics; cloud cost management. - HIPAA, the shared responsibility model and BAAs with cloud providers (training provided). - Professional English (spoken and written) for daily work with US-based colleagues and clients. ## Working Conditions - Flexible working hours, with an agreed daily overlap window with US-based teams for meetings and real-time collaboration. - Fully remote from Vietnam; no business travel or on-site attendance is required. ## What We Offer - 💰 Salary reviewed annually. - 🏠 Flexible working hours and fully remote work – no travel or on-site attendance required. - 🎁 13th-month salary and performance bonus. - 🌙 Night-shift allowance in accordance with the Vietnam Labour Code for any hours worked at night. - 🏥 Full social, health and unemployment insurance in accordance with Vietnamese law, plus private healthcare insurance. - 📚 Company-sponsored certifications and training budget. - 💻 Company-managed laptop and equipment. - 🌴 Annual leave of at least 12 days plus Vietnamese public holidays. - 🌍 Long-term work with international teams. --- ## How to Apply Send your CV to **[jobs@senworks.com](mailto:jobs@senworks.com)** with the subject line: `Cloud Engineer (Azure Platform / IaC) – [Your Name]`