Cloud Infrastructure Engineer (Azure/Terraform)

Location: Remote, U.S.-based; includes shared on-call support for production issues and occasional after-hours patching and deployments.

Salary: USD $90,000–$110,000 per year, plus eligibility for two bonus programs and a company profit-sharing bonus plan.

Company

CalcAir is a benefits software and services provider within the Gemini Group, part of Constellation Software Inc., developing SaaS web products for employee benefit professionals.

What you will do

• Design, deploy, and maintain Azure infrastructure with Terraform across networking, identity, compute, databases, storage, and monitoring.
• Manage dev, QA, and production environments, improving consistency, deployment practices, and infrastructure changes for web applications and APIs.
• Collaborate with developers on CI/CD pipelines, deployment practices, monitoring, logging, alerting, backups, and disaster recovery.
• Run vulnerability scanning, coordinate external penetration testing, track remediation, and maintain security policies, procedures, incident response documentation, access reviews, and audit evidence.
• Manage Azure identity, least-privilege access, secrets, and key management while helping mature SaaS security practices toward SOC 2.
• Manage Azure budgets, alerts, tagging, right-sizing, reservations, licensing, and monthly cost reporting; use AI tools such as Claude Code securely for infrastructure, scripting, documentation, and security work.

Requirements

• 4+ years of experience in cloud infrastructure, DevOps, or systems engineering, including at least 2 years of hands-on Azure experience.
• Strong Terraform experience building and maintaining production infrastructure.
• Experience running separate dev, QA, and production environments for web applications.
• Experience building and maintaining CI/CD pipelines, ideally with GitHub Actions.
• Working knowledge of web application security, including OWASP Top 10, identity, network security, and secrets management.
• Hands-on experience with vulnerability scanning tools and remediation of findings.
• Demonstrated experience reducing or controlling cloud costs, with examples.
• Collaborative working style, including shared ownership, clear documentation, and explaining technical tradeoffs to non-technical leaders.
• Regular use of AI tools such as Claude Code, with good judgment about their appropriate use.

Nice to have

• Experience helping a company prepare for or pass a SOC 2 audit.
• Microsoft certifications such as AZ-104, AZ-500, or AZ-400.
• Experience with Microsoft Defender for Cloud, Microsoft Sentinel, or similar security tools.
• Familiarity with Azure DevOps boards and pipelines.
• FinOps experience or certification.
• Experience at a small or growing software company helping processes mature as the business scales.

Culture & Benefits

• Full-time employment with medical, dental, vision, life insurance, disability coverage, and 401(k) participation with company match.
• At least 10 vacation days for new employees, state-required sick time, 8 company-paid holidays, and 2 personal holidays per year.
• Inclusive work environment and equal employment opportunity commitment.
• Close collaboration with the Azure Cloud Infrastructure & Applications Support Specialist, Modernization development team, and Product.

Hiring process

• A conditional offer may be followed by a criminal background check in accordance with applicable law.
• Reasonable accommodations are available for applicants with disabilities during the application process.