About InvoiceCloud:
InvoiceCloud is a fast-growing fintech leader recognized with 20 major awards in 2025, including USA TODAY and Boston Globe Top Workplaces, multiple SaaS Awards wins for Best Solution for Finance and FinTech, and national customer service honors from Stevie and the Business Intelligence Group. Judges also highlighted our mission to reduce digital exclusion and restore simplicity and dignity to how people pay for essential services, as well as our leadership in AI maturity and responsible innovation. It’s an award-winning, purpose-driven environment where top talent thrives.
We are seeking a skilled and proactive Cloud Platform Engineer to design, deploy, and operate Azure-native infrastructure powering InvoiceCloud’s enterprise SaaS platform. You will own AKS clusters and supporting services, implement infrastructure as code with Terraform/Ansible, and optimize Azure networking (VNets, NSGs, load balancers, VPNs) for scale and resiliency. The role integrates Cloudflare (DNS, CDN, WAF, Zero Trust) to secure and accelerate edge traffic and partners closely with application teams running Windows/IIS and modern & legacy .NET workloads. You will enhance CI/CD pipelines, establish robust monitoring/alerting with Azure Monitor and Log Analytics, and uphold governance (e.g., RBAC, policies) across environments. As part of the on-call rotation, you will lead incident response, drive root cause analysis, and implement preventive automation to improve reliability over time.
Success Profile:
At InvoiceCloud, success is anchored in our core competencies—Results Driven, Takes Ownership, Drives Efficiency, and Innovative—which guide how every employee delivers impact.
Results Driven
- Deliver reliable AKS platforms and Azure networking that meet availability, performance, and security objectives; validate outcomes with actionable SLOs and dashboards.
- Execute changes through CI/CD with rigorous testing and phased rollouts to minimize risk while meeting delivery timelines.
- Lead incident response to rapid resolution, capture learnings, and implement durable fixes that measurably reduce repeat issues.
Takes Ownership
- Own end-to-end IaC (Terraform modules, Ansible playbooks) and AKS baselines; maintain versioned patterns that teams can consume with confidence.
- Anticipate platform needs (capacity, security posture, cost) and drive proposals that balance reliability, performance, and spend.
- Partner with dev/security/ops to align on standards (RBAC, policies, WAF/Zero Trust rules) and ensure consistent, compliant environments.
Drives Efficiency
- Standardize and templatize Terraform for reusable, secure-by-default provisioning; automate day-2 ops (scaling, patching, backups).
- Improve CI/CD throughput with environment promotions, automated validations, and safe rollbacks for .NET/IIS and containerized apps.
- Optimize observability (Azure Monitor/Log Analytics; optional Prometheus/Grafana/New Relic) to cut MTTR and reduce alert noise.
Innovative
- Evaluate and implement Azure/AKS and Cloudflare capabilities (e.g., Zero Trust, WAF tuning, ingress add-ons) that enhance resilience and security.
- AI/Automation: Use GenAI assistants for runbook drafts and postmortem synthesis; apply policy-as-code and scripted remediations to auto-heal common failure modes and accelerate root cause analysis.
- Pilot observability and performance-testing improvements that inform capacity planning and right-sizing decisions.
Requirements
- Experience: 5+ years in cloud engineering focused on Microsoft Azure; strong hands-on AKS/Kubernetes and containerized workloads.
- Platforms & apps: Windows Server, IIS, and .NET Framework/Core application support.
- Automation & IaC: Terraform (expert), Ansible (deployment/config), scripting in PowerShell/Bash/Python.
- Networking & edge: Azure VNets/NSGs/Load Balancers/VPNs; Cloudflare DNS/CDN/WAF/Zero Trust.
- Delivery & ops: CI/CD (GitHub Actions or Azure DevOps), monitoring/troubleshooting (Azure Monitor, Log Analytics; familiarity with Prometheus/Grafana/New Relic a plus).
- Security & governance: Compliance mindset; knowledge of Azure Policy, Blueprints, and RBAC preferred; excellent problem-solving and communication skills.
- Certifications (preferred): Azure AZ-104, AZ-305, AZ-400.
Benefits:
We offer a competitive benefits program including:
- Medical, dental, vision, life & disability insurance
- 401(k) plan with company match
- Flexible Time Off (FTO), wellbeing days, paid holidays, and summer Fridays
- Mental health resources
- Paid parental leave & Backup Care
- Tuition reimbursement
- Employee Resource Groups (ERGs)
Base salary is one component of total compensation. Employees may also be eligible for an annual bonus or commission. Some roles may also be eligible for overtime pay. The above represents the expected base compensation range for this job requisition. Ultimately, in determining your pay, we’ll consider many factors including, but not limited to, skills, experience, qualifications, geographic location, and other job-related factors.
InvoiceCloud is an Equal Opportunity Employer.
InvoiceCloud provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
If you have a disability under the Americans with Disabilities Act or similar law, or you require a religious accommodation, and you wish to discuss potential accommodations related to applying for employment at our company, please contact [email protected].
Click here to review InvoiceCloud's Job Applicant Privacy Policy.
To all recruitment agencies: InvoiceCloud does not accept agency resumes. Please do not forward resumes to our job’s alias, employees, or any other organization location. Invoice Cloud is not responsible for any fees related to unsolicited resumes.
