Sr. Cloud Platform Engineer (GCP, Azure)

Job Description

Amazing Career Moments Happen Here 

 

The best work happens when smart people move fast, together. At Applied, we’ve spent 40+ years building technology that solves real problems for insurance professionals, and we’re not slowing down. We’re pushing what’s possible in Insurtech and doing it inside a culture built on trust, inclusion, and growth. 

 

The Role at a Glance 

Role: Senior Cloud Platform Engineer (GCP, Azure)

Team: Corporate IT

Location: Remote

 

Opportunity for Impact 

We’re looking for a Senior Cloud Platform Engineer (GCP, Azure) to join our Corporate IT and make a real difference for the people who depend on our products every day. This role owns our cloud platform across Google Cloud Platform (GCP) (primary) and Azure (secondary), with strong preferred experience in AWS. You will design, build, and operate cloud-native infrastructure at enterprise scale — including landing zone automation, Kubernetes platforms, secrets management, hybrid networking, and application delivery pipelines. If you thrive in a fast-paced, collaborative environment and are passionate about driving business outcomes through cloud excellence and AI-augmented engineering, we want to hear from you 

 

What You’ll Do  

 

Cloud Infrastructure & Architecture

• Design, build, and maintain scalable, secure, and highly available environments across Azure (primary) and GCP, with working knowledge of AWS
• Own landing zone design and automation for both GCP and Azure — including organization hierarchy, resource naming standards, IAM governance, and policy enforcement
• Design and operate production-grade Kubernetes environments (AKS and GKE) including multi-tenant cluster strategies, workload identity, pod security standards, autoscaling, resiliency, cost optimization, and Helm-based application deployment
• Build and operate the GCP Project Factory for standardized, automated provisioning of GCP projects, IAM bindings, service accounts, and GitLab integration
• Define and enforce cloud resource naming conventions, project labeling standards, and organizational tagging policies aligned with FinOps and cost allocation requirements

 Infrastructure as Code & Automation

• Develop and maintain Terraform modules for GCP and Azure resource provisioning (AWS IaC a plus), ensuring reusable, version-controlled infrastructure
• Build and manage CI/CD pipelines (GitLab CI, Azure DevOps, Cloud Build, or equivalent) for automated infrastructure and application deployment, including container build, Artifact Registry publishing, and Cloud Run / GKE delivery patterns
• Own and evolve the Ansible AWX automation platform (currently running on AKS) — develop and maintain playbooks and roles to automate system configuration, application setup, and operational workflows
• Administer and evolve the CloudBolt Cloud Management Platform (CMP) for multi-cloud resource provisioning, governance, cost visibility, and self-service workflows
• Develop automation scripts using Python, Bash, or PowerShell to streamline operational tasks
• Leverage AI tools including Claude to accelerate Infrastructure as Code development, runbook creation, and documentation — and help the broader team adopt these workflows effectively

  Operations & Reliability

• Implement and manage monitoring, alerting, and observability solutions using Google Cloud Monitoring, Azure Monitor, Cloud Logging, SigNoz, and DataDog
• Develop and maintain runbooks and playbooks to guide incident response; perform root cause analysis (RCA) and document findings
• Respond to escalated infrastructure service desk tickets and resolve complex cloud-related issues

 Security & Compliance

• Design, operate, and secure enterprise-grade secrets management using HashiCorp Vault across cloud and hybrid environments, including Vault role management and CI/CD pipeline integration
• Implement and enforce cloud security controls across Azure (Managed Identity, Private Endpoints, NSG) and GCP (VPC Service Controls, Workload Identity, Binary Authorization, Secret Manager), including workforce and workload identity federation with external IdPs
• Partner with the Information Security organization to identify, prioritize, and remediate cloud security vulnerabilities

 Hybrid Connectivity

• Design and maintain hybrid network connectivity between Azur