Job Description
About InvoiceCloud:
InvoiceCloud is a fast-growing fintech leader recognized with 20 major awards in 2025, including USA TODAY and Boston Globe Top Workplaces, multiple SaaS Awards wins for Best Solution for Finance and FinTech, and national customer service honors from Stevie and the Business Intelligence Group. Judges also highlighted our mission to reduce digital exclusion and restore simplicity and dignity to how people pay for essential services, as well as our leadership in AI maturity and responsible innovation. It’s an award-winning, purpose-driven environment where top talent thrives. To learn more, visit InvoiceCloud.com.
Job Details:
We are seeking a skilled and proactive Cloud Platform Engineer to design, deploy, and operate Azure-native infrastructure powering InvoiceCloud’s enterprise SaaS platform. You will own AKS clusters and supporting services, implement infrastructure as code with Terraform/Ansible, and optimize Azure networking (VNets, NSGs, load balancers, VPNs) for scale and resiliency. The role integrates Cloudflare (DNS, CDN, WAF, Zero Trust) to secure and accelerate edge traffic and partners closely with application teams running Windows/IIS and modern & legacy .NET workloads. You will enhance CI/CD pipelines, establish robust monitoring/alerting with Azure Monitor and Log Analytics, and uphold governance (e.g., RBAC, policies) across environments. As part of the on-call rotation, you will lead incident response, drive root cause analysis, and implement preventive automation to improve reliability over time.
Success Profile:
At InvoiceCloud, success is anchored in our core competencies—which guide how every employee delivers impact.
Results Driven
- Deliver reliable AKS platforms and Azure networking that meet availability, performance, and security objectives; validate outcomes with actionable SLOs and dashboards.
- Execute changes through CI/CD with rigorous testing and phased rollouts to minimize risk while meeting delivery timelines.
- Lead incident response to rapid resolution, capture learnings, and implement durable fixes that measurably reduce repeat issues.
Takes Ownership
- Own end-to-end IaC (Terraform modules, Ansible playbooks) and AKS baselines; maintain versioned patterns that teams can consume with confidence.
- Anticipate platform needs (capacity, security posture, cost) and drive proposals that balance reliability, performance, and spend.
- Partner with dev/security/ops to align on standards (RBAC, policies, WAF/Zero Trust rules) and ensure consistent, compliant environments.
Drives Efficiency
- Standardize and templatize Terraform for reusable, secure-by-default provisioning; automate day-2 ops (scaling, patching, backups).
- Improve CI/CD throughput with environment promotions, automated validations, and safe rollbacks for .NET/IIS and containerized apps.
- Optimize observability (Azure Monitor/Log Analytics; optional Prometheus/Grafana/New Relic) to cut MTTR and reduce alert noise.
Innovative
- Evaluate and implement Azure/AKS and Cloudflare capabilities (e.g., Zero Trust, WAF tuning, ingress add-ons) that enhance resilience and security.
- AI/Automation: Use GenAI assistants for runbook drafts and postmortem synthesis; apply policy-as-code and scripted remediations to auto-heal common failure modes and accelerate root cause analysis.
- Pilot observability and performance-testing improvements that inform capacity planning and right-sizing decisions.
Requirements
- Experience: 5+ years in cloud engineering focused on Microsoft Azure; strong hands-on AKS/Kubernetes and containerized workloads.
- Platforms & apps: Windows Server, IIS, and .NET Framework/Core application support.
- Automation & IaC: Terraform (expert), Ansible (deployment/config), scripting in PowerShell/Bash/Python.
- Networking & edge: Azure VNets/NSGs/Load Balancers/VPNs; Cloudflare DNS/CDN/WAF/Zero Trust.
- Delivery & ops: CI/CD (GitHub Actions or Azure DevOps), monitoring/troubleshooting (Azure Monitor, Log Analytics; familiarity with Prometheus/Grafana/New Relic a plus).
- Security & governance: Compliance mindset; knowledge of Azure Policy, Blueprints, and RBAC preferred; excellent problem-solving and communication skills.
- Certifications (preferred): Azure AZ-104, AZ-305, AZ-400.
Benefits:
We offer a competitive benefits program including:
- Medical, dental, vision, life & disability insurance
- 401(k) plan with company match
- Flexible Time Off (FTO), wellbeing days, paid holidays, and summer Fridays
- Mental health resources
- Paid parental leave & Backup Care
- Tuition reimbursement
- Employee Resource Groups (ERGs)
Base salary is one component of total compensation. Employees may also be eligible for an annual bonus or commission. Some roles may also be eligible for overtime pay. The above represents the expected base compensation range for this job requisition. Ultimately, indetermining your pay, we’ll consider many factors including, but not limited to, skills, experience, qualifications, geographic location, and other job-related factors.
Base Compensation Range
$90,000—$105,000 USD
InvoiceCloud is committed to providing equal employment opportunities to all employees and applicants. We do not tolerate discrimination or harassment of any kind based on race, color, religion, age, sex, nationality, disability, genetic information, veteran or military status, sexual orientation, gender identity or expression, or any other characteristic protected under applicable laws.
This commitment applies to all aspects of employment, including recruitment, hiring, placement, promotion, termination, layoff, recall, transfer, leave, compensation, and training.
If you require a disability-related or religious accommodation during the application or recruitment process, and wish to discuss possible adjustments, please contact [email protected].
Click here to review InvoiceCloud’s Job Applicant Privacy Policy.
For recruitment agencies: InvoiceCloud does not accept unsolicited resumes from agencies. Please do not forward resumes to our job aliases, employees, or any other company location. InvoiceCloud is not responsible for any fees associated with unsolicited submissions.
