[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-infrastructure-cloud-engineer-arch-capital-services-llc-de-us":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":79,"processed_longitude":80,"processed_employment_types":81,"processed_working_hours":82,"processed_working_hours_labels":84,"processed_home_office":85,"processed_salary_min":76,"processed_salary_max":77,"processed_salary_currency":73,"processed_salary_source":86,"processed_benefits":87,"processed_benefits_labels":100,"processed_industry":101,"processed_skills":7,"processed_job_location":102,"processed_full_address_gmaps":104,"processed_street_gmaps":106,"processed_city_gmaps":107,"processed_postal_code_gmaps":108,"processed_country_gmaps":109,"processed_country_iso_code_gmaps":111,"full_description":16,"formatted_description":112,"processed_employment_types_labels":36,"processed_home_office_labels":34,"processed_industry_labels":38,"processed_it_skills":113,"processed_it_skills_labels":117,"processed_soft_skills":118,"processed_soft_skills_labels":119,"processed_job_expertise_skills":120,"processed_job_expertise_skills_labels":121,"processed_language_requirements":122,"processed_total_experience_years":115,"processed_professional_field":129,"processed_professional_field_labels":132,"processed_leadership_role":11,"processed_date_posted":20,"raw_job_url":133,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":134,"canonical_industry_label":135,"max_cpc":136,"actual_cpc":7},80585,"infrastructure-cloud-engineer-arch-capital-services-llc","Infrastructure Cloud Engineer",null,{"name":9,"slug":10,"logo_url":7},"Arch Capital Services LLC","arch-capital-services-llc",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":20,"validThrough":21,"jobLocation":22,"jobLocationType":34,"employmentType":35,"industry":37,"skills":39,"baseSalary":71},"https:\u002F\u002Fschema.org\u002F","JobPosting","With a company culture rooted in collaboration, expertise and innovation, we aim to promote progress and inspire our clients, employees, investors and communities to achieve their greatest potential. Our work is the catalyst that helps others achieve their goals. In short, We Enable Possibility℠. The Position A mid-level Infrastructure Cloud Engineer responsible for designing, operating, and evolving our Azure environment. This role focuses on architecture, hands-on operations, and translating business\u002Ftechnical requirements into sound Azure designs that Corporate then implements. This role will be responsible for automation of operations for infrastructure and financial operations to maintain predicable cost. Job Responsibilities Design Azure infrastructure architecture for new projects (networking topology, resource organization, subscription\u002Fresource group structure) Evaluate Azure services against business requirements and recommend solutions Produce and maintain architecture diagrams, design documents, and decision records for review with stakeholders Assess proposed changes for scalability, resilience, and cost impact before build Participate in architecture review sessions with Arch Re Enterprise Architecture team and Service Delivery management. Monitor resource health, utilization, and cost; flag optimization opportunities Design and build dashboards, scripts, tools and other assets to be used by the Infrastructure Operations team. Develop thresholds, alerting and supporting processes for incident routing. Troubleshoot infrastructure issues and produce root-cause analysis and remediation specs for Corporate to execute as a member of the level 3 Infrastructure support team Design and maintain in collaboration with Network Engineer specifications for VNets, subnets, peering, ExpressRoute\u002FVPN, load balancers, and firewalls Design and maintain DNS and hybrid connectivity between on-prem and Arch cloud environments in Azure and AWS Design IAM\u002FRBAC models and least-privilege access structures in Azure AD\u002FEntra ID Review conditional access policies set by Corporate for segment requirements and access review processes and how they impact users and services delivered by Reinsurance IT Partner with security\u002Fcompliance on identity governance given regulatory obligations (insurance\u002Ffinancial services) Ensure architecture designs meet compliance requirements (SOC 2, applicable insurance\u002Ffinancial regulations) Review security posture of existing cloud resources and recommend remediation Assist product teams with DevSecOps processes and remediations of findings where applicable. Support audits with architecture documentation and evidence Translate architecture designs into specifications and runbooks Corporate's build teams can execute (Terraform\u002FARM\u002FBicep requirements, pipeline requests) Review Corporate's IaC output against intended design for correctness Required Qualifications 3–5 years in infrastructure, systems administration, or cloud engineering At least 3 years hands-on experience with Azure native services (compute, storage, networking, Entra ID) AZ-104 or AZ-305 required Solid networking fundamentals (TCP\u002FIP, DNS, VPN, load balancing, hybrid connectivity) Demonstrated 2 years’ experience writing and troubleshooting Infrastructure as Code (IaC) (Terraform or Bicep) Github in use for infrastructure scripting and IaC Scripting proficiency (PowerShell or Python) for diagnostics and reporting Experience with Windows\u002FLinux server administration Preferred Qualifications Experience in a regulated industry (insurance, financial services) Familiarity with Azure AD\u002FEntra ID governance, conditional access, and PIM Exposure to architecture frameworks (Azure Well-Architected Framework) AZ-305 (Azure Solutions Architect) certification Soft Skills Ability to design solutions independently while working within a shared build-automation model Strong documentation skills — designs must be handed off cleanly to a separate build team Strong communications skills – ability to interface directly with stakeholders in group meetings and one-on-one via email. Comfortable operating at the design\u002Fimplementation boundary Strong sense of accountability and ownership. Able to take an incident or project to closure. For individuals assigned or hired to work in the location(s) indicated below, the base salary range is provided. Range is as of the time of posting. Position is incentive eligible. $125,000 - $155,000\u002Fyear Total individual compensation (base salary, short & long-term incentives) offered will take into account a number of factors including but not limited to geographic location, scope & responsibilities of the role, qualifications, talent availability & specialization as well as business needs. The above pay range may be modified in the future. Arch is committed to helping employees succeed through our comprehensive benefits package that includes multiple medical plans plus dental, vision and prescription drug coverage; a competitive 401k with generous matching; PTO beginning at 20 days per year; up to 12 paid company holidays per year plus 2 paid days of Volunteer Time Offer; basic Life and AD&D Insurance as well as Short and Long-Term Disability; Paid Parental Leave of up to 10 weeks; Student Loan Assistance and Tuition Reimbursement, Backup Child and Elder Care; and more. Click here to learn more on available benefits. Do you like solving complex business problems, working with talented colleagues and have an innovative mindset? Arch may be a great fit for you. If this job isn’t the right fit but you’re interested in working for Arch, create a job alert! Simply create an account and opt in to receive emails when we have job openings that meet your criteria. Join our talent community to share your preferences directly with Arch’s Talent Acquisition team. 10200 Arch Capital Services LLC Arch Capital Group Ltd. is a Bermuda-based specialty insurer that provides insurance, reinsurance and mortgage insurance on a worldwide basis. With a 20+-year track record of delivering results and a coveted position on the S&P 500 index, Arch is a great place to grow your career. Attention Job Seekers: Arch Capital Group Ltd. (Arch) and its affiliates take your interest in working here very seriously. Please be vigilant to fraudulent activity if you receive a communication or email asking you to submit any personal information. Do not send money or pass any details to someone suggesting they can provide employment with Arch. You should only enter your information into our official career portal. Please know the following about our interviewing and hiring practices. We never make job offers without a formal, in person, interview process. We never ask you to send money of any kind.",{"@type":18,"name":19},"Organization","10200 Arch Capital Services LLC","2026-10-05","2027-10-05",[23],{"@type":24,"address":25,"geo":30},"Place",{"@type":26,"addressLocality":27,"addressCountry":28,"addressRegion":29},"PostalAddress","Farmington","US","Connecticut",{"@type":31,"latitude":32,"longitude":33},"GeoCoordinates",41.7360305,-72.79502699999999,"HYBRID",[36],"PERMANENT",[38],"Insurance and Financial Services",[40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70],"Azure","Terraform","Bicep","PowerShell","Python","GitHub","Azure AD\u002FEntra ID","Networking (TCP\u002FIP, DNS, VPN, Load Balancing)","Windows Server Administration","Linux Server Administration","Infrastructure as Code (IaC)","Azure Well-Architected Framework","DevSecOps","IAM\u002FRBAC","Conditional Access","Privileged Identity Management (PIM)","Independent Design","Documentation","Communication","Accountability","Ownership","Collaboration","Cloud Architecture","Infrastructure Operations","Cost Optimization","Compliance (SOC 2, Insurance\u002FFinancial Regulations)","Security Posture Review","Incident Management","Root Cause Analysis","Architecture Documentation","Stakeholder Management",{"@type":72,"currency":73,"value":74},"MonetaryAmount","USD",{"@type":75,"minValue":76,"maxValue":77,"unitText":78},"QuantitativeValue",125000,155000,"YEAR",[32],[33],"permanent",[83],"FULL_TIME",[83],"hybrid","estimated",[88,89,90,91,92,93,94,95,96,97,98,99],"Multiple medical plans","Dental, vision and prescription drug coverage","Competitive 401k with generous matching","PTO beginning at 20 days per year","Up to 12 paid company holidays per year","2 paid days of Volunteer Time Off","Basic Life and AD&D Insurance","Short and Long-Term Disability","Paid Parental Leave of up to 10 weeks","Student Loan Assistance","Tuition Reimbursement","Backup Child and Elder Care",[88,89,90,91,92,93,94,95,96,97,98,99],"insurance and financial services",[103],"10200, farmington, ct, united states of america",[105],"Farmington, Connecticut, USA",[],[27],[],[110],"USA",[28],"With a company culture rooted in collaboration, expertise and innovation, we aim to promote progress and inspire our clients, employees, investors and communities to achieve their greatest potential. Our work is the catalyst that helps others achieve their goals. In short, We Enable Possibility℠.\n\n## The Position\n\nA mid-level Infrastructure Cloud Engineer responsible for designing, operating, and evolving our Azure environment. This role focuses on architecture, hands-on operations, and translating business\u002Ftechnical requirements into sound Azure designs that Corporate then implements. This role will be responsible for automation of operations for infrastructure and financial operations to maintain predicable cost.\n\n## Job Responsibilities\n\n- Design Azure infrastructure architecture for new projects (networking topology, resource organization, subscription\u002Fresource group structure)\n- Evaluate Azure services against business requirements and recommend solutions\n- Produce and maintain architecture diagrams, design documents, and decision records for review with stakeholders\n- Assess proposed changes for scalability, resilience, and cost impact before build\n- Participate in architecture review sessions with Arch Re Enterprise Architecture team and Service Delivery management.\n- Monitor resource health, utilization, and cost; flag optimization opportunities\n- Design and build dashboards, scripts, tools and other assets to be used by the Infrastructure Operations team.\n- Develop thresholds, alerting and supporting processes for incident routing.\n- Troubleshoot infrastructure issues and produce root-cause analysis and remediation specs for Corporate to execute as a member of the level 3 Infrastructure support team\n- Design and maintain in collaboration with Network Engineer specifications for VNets, subnets, peering, ExpressRoute\u002FVPN, load balancers, and firewalls\n- Design and maintain DNS and hybrid connectivity between on-prem and Arch cloud environments in Azure and AWS\n- Design IAM\u002FRBAC models and least-privilege access structures in Azure AD\u002FEntra ID\n- Review conditional access policies set by Corporate for segment requirements and access review processes and how they impact users and services delivered by Reinsurance IT\n- Partner with security\u002Fcompliance on identity governance given regulatory obligations (insurance\u002Ffinancial services)\n- Ensure architecture designs meet compliance requirements (SOC 2, applicable insurance\u002Ffinancial regulations)\n- Review security posture of existing cloud resources and recommend remediation\n- Assist product teams with DevSecOps processes and remediations of findings where applicable.\n- Support audits with architecture documentation and evidence\n- Translate architecture designs into specifications and runbooks Corporate's build teams can execute (Terraform\u002FARM\u002FBicep requirements, pipeline requests)\n- Review Corporate's IaC output against intended design for correctness\n\n## Required Qualifications\n\n- 3–5 years in infrastructure, systems administration, or cloud engineering\n- At least 3 years hands-on experience with Azure native services (compute, storage, networking, Entra ID)\n- AZ-104 or AZ-305 required\n- Solid networking fundamentals (TCP\u002FIP, DNS, VPN, load balancing, hybrid connectivity)\n- Demonstrated 2 years’ experience writing and troubleshooting Infrastructure as Code (IaC) (Terraform or Bicep)\n- Github in use for infrastructure scripting and IaC\n- Scripting proficiency (PowerShell or Python) for diagnostics and reporting\n- Experience with Windows\u002FLinux server administration\n\n## Preferred Qualifications\n\n- Experience in a regulated industry (insurance, financial services)\n- Familiarity with Azure AD\u002FEntra ID governance, conditional access, and PIM\n- Exposure to architecture frameworks (Azure Well-Architected Framework)\n- AZ-305 (Azure Solutions Architect) certification\n\n## Soft Skills\n\n- Ability to design solutions independently while working within a shared build-automation model\n- Strong documentation skills — designs must be handed off cleanly to a separate build team\n- Strong communications skills – ability to interface directly with stakeholders in group meetings and one-on-one via email.\n- Comfortable operating at the design\u002Fimplementation boundary\n- Strong sense of accountability and ownership. Able to take an incident or project to closure.\n\nFor individuals assigned or hired to work in the location(s) indicated below, the base salary range is provided. Range is as of the time of posting. Position is incentive eligible.\n\n$125,000 - $155,000\u002Fyear\n\nTotal individual compensation (base salary, short & long-term incentives) offered will take into account a number of factors including but not limited to geographic location, scope & responsibilities of the role, qualifications, talent availability & specialization as well as business needs. The above pay range may be modified in the future.\n\nArch is committed to helping employees succeed through our comprehensive benefits package that includes multiple medical plans plus dental, vision and prescription drug coverage; a competitive 401k with generous matching; PTO beginning at 20 days per year; up to 12 paid company holidays per year plus 2 paid days of Volunteer Time Offer; basic Life and AD&D Insurance as well as Short and Long-Term Disability; Paid Parental Leave of up to 10 weeks; Student Loan Assistance and Tuition Reimbursement, Backup Child and Elder Care; and more. Click here to learn more on available benefits.\n\nDo you like solving complex business problems, working with talented colleagues and have an innovative mindset? Arch may be a great fit for you. If this job isn’t the right fit but you’re interested in working for Arch, create a job alert! Simply create an account and opt in to receive emails when we have job openings that meet your criteria. Join our talent community to share your preferences directly with Arch’s Talent Acquisition team.\n\n10200 Arch Capital Services LLC\n\nArch Capital Group Ltd. is a Bermuda-based specialty insurer that provides insurance, reinsurance and mortgage insurance on a worldwide basis. With a 20+-year track record of delivering results and a coveted position on the S&P 500 index, Arch is a great place to grow your career.\n\nAttention Job Seekers: Arch Capital Group Ltd. (Arch) and its affiliates take your interest in working here very seriously. Please be vigilant to fraudulent activity if you receive a communication or email asking you to submit any personal information. Do not send money or pass any details to someone suggesting they can provide employment with Arch. You should only enter your information into our official career portal. Please know the following about our interviewing and hiring practices. We never make job offers without a formal, in person, interview process. We never ask you to send money of any kind.",{"azure":114,"bicep":115,"github":115,"python":115,"iam\u002Frbac":115,"devsecops":116,"terraform":115,"powershell":115,"azure ad\u002Fentra id":114,"conditional access":116,"linux server administration":115,"infrastructure as code (iac)":115,"windows server administration":115,"azure well-architected framework":116,"privileged identity management (pim)":116,"networking (tcp\u002Fip, dns, vpn, load balancing)":114},4,3,2,[40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55],{"independent design":114,"documentation":114,"communication":114,"accountability":114,"ownership":114,"collaboration":115},[56,57,58,59,60,61],{"cost optimization":115,"cloud architecture":114,"incident management":115,"root cause analysis":115,"stakeholder management":115,"security posture review":115,"infrastructure operations":114,"architecture documentation":114,"compliance (soc 2, insurance\u002Ffinancial regulations)":115},[62,63,64,65,66,67,68,69,70],{"detected_language_jobad":123,"required":124},"en",[125],[126],{"language":127,"level":128},"ENGLISH","C1",[130,131],"Information and Communications Technology Professionals","Science and Engineering Professionals",[130,131],"https:\u002F\u002Farchgroup.wd1.myworkdayjobs.com\u002Fen-us\u002Fcareers\u002Fjob\u002Ffarmington-ct-united-states-of-america\u002Finfrastructure-cloud-engineer_r26_1071","insurance","Insurance",1]