Back to jobs

Senior Azure Cloud Engineer

San Carlos, California, United States

Join our Mission to Protect Humankind!

Vaxcyte is a clinical-stage vaccine innovation company engineering high-fidelity vaccines to protect humankind from the consequences of bacterial diseases, which have serious and costly health consequences when left unchecked. Working to eradicate or treat bacterial infections such as invasive pneumococcal disease, Group A Strep, and Shigella is just the beginning. Our path to success is clear and well-defined, and Vaxcyte is set up to go the distance. 
 
WHAT we do is every bit as important as HOW we do it! Our work together is guided by four enduring core values:
 
*RETHINK CONVENTION: We bring creative and intellectual diversity to every facet of the work we do in order to innovate and re-innovate the way vaccines are delivered.
 
*AIM HIGH: We embody our collectively audacious goal to courageously make the most complex biologics ever attempted to protect humankind.
 
*LEAD WITH HEART: Everyone leads at Vaxcyte with a kindness-first, inclusive approach to collaboration and vigorous debate that advances our business objectives.
 
*MODEL EXCELLENCE:  The magnitude of our challenge requires our shared commitment to demonstrating integrity, accountability, equality and clarity across communications and decision making.

Summary:

We are seeking a skilled and passionate Azure Cloud Engineer to join our growing engineering team. In this role, you will design, build, and maintain secure, scalable cloud infrastructure on Microsoft Azure, using Infrastructure as Code (IaC) best practices — primarily Terraform. You will collaborate with cross-functional teams to deliver reliable hosting solutions that meet the highest standards of security and compliance.

The ideal candidate holds an Azure certification, brings strong software engineering fundamentals, and has hands-on experience with a broad range of Azure services. Experience in validated or regulated environments, particularly within the Life Sciences sector, is considered a valuable plus.

Essential Functions:

Infrastructure & Cloud Engineering

  • Design, deploy, and manage Azure cloud infrastructure using Terraform and Infrastructure as Code (IaC) best practices.
  • Provision and maintain Azure services including AKS, ADF, Microsoft Fabric, Managed SQL Instances, Virtual Machines, and Batch Accounts.
  • Build and maintain secure virtual networks, including firewalls, private endpoints, NSGs, and network segmentation.
  • Ensure infrastructure meets organizational security standards, including identity and access management via Azure AD / Entra ID and RBAC.
  • Configure and monitor logs and notifications to proactively identify issues and minimize downtime.
  • Monitor Azure end of support components and plan changes and updates to the infrastructure as needed.
  • Develop, test and maintain backup and disaster recovery plans for infrastructure.

Security & Compliance

  • Enforce security controls and conduct regular audits to maintain compliance with organizational and regulatory requirements.
  • Support validated and regulated environmental requirements (e.g. GxP, ISO, SOC 2) where applicable.
  • Monitor infrastructure health and respond to security incidents promptly and effectively.

Collaboration & Continuous Improvement

  • Collaborate with software, data engineering, and platform teams to support application hosting and CI/CD pipelines.
  • Document architecture decisions, runbooks, and operational procedures to support team knowledge sharing.
  • Evaluate and adopt new Azure services and cloud-native tooling to improve platform reliability and efficiency.
  • Contribute to monitoring, logging, and observability improvements across the infrastructure estate.

Requirements: 

  • Bachelor’s degree in computer science, Engineering, or related field (or equivalent experience) with a minimum of 5+ years of experience. Other combinations of education and/or experience may be considered.

    • Microsoft Azure certification (e.g. AZ-104, AZ-305, or equivalent) is required.
    • Proven experience with Terraform for provisioning and managing cloud infrastructure at scale.Strong understanding of Azure networking: VNets, subnets, NSGs, private DNS, and firewall configurations.
    • Hands-on experience with Azure services: AKS, ADF, Managed SQL, VMs, and Batch Accounts.
    • Solid software engineering fundamentals: version control (Git), scripting (PowerShell/Bash/Python), and code review practices.
    • Experience implementing cloud security controls, including identity management and RBAC.
    • Excellent communication skills with the ability to explain technical concepts to varied audiences.
    • Strong architectural and systems design capability with an infrastructure-as-code mindset.
    • Ownership mindset with accountability for reliability, security, and performance outcomes.
    • Commitment to automation, documentation, and operational excellence.
    • Ability to balance technical rigor with delivery timelines in a fast-paced environment.
    • Collaborative team player who works effectively across engineering and business functions.

    Preferred Qualifications

    • Experience working in validated or regulated environments (e.g. GxP, ISO, SOC 2).
    • Background in the Life Sciences, Pharmaceutical, or Healthcare sectors.
    • Familiarity with Microsoft Fabric and modern data platform architectures.
    • Knowledge of DevOps and GitOps workflows, including Azure DevOps or GitHub Actions.
    • Experience with cloud cost optimization strategies and governance frameworks.
Reports to: Associate Director, Data Systems, CMC IT
 
Location: San Carlos, CA
 
Work Arrangement (may be adjusted based on business needs, job responsibilities, or changes to company policy): Hybrid (3 days per week onsite)
 
Compensation:
The compensation package will be competitive and includes comprehensive benefits and an equity component.
 
Salary Range: $163,000 - $191,000 (SF Bay Area). Salary ranges for non-California locations may vary.

Equal Opportunity

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Recruitment Fraud Notice

Please be aware of fraud or scams from individuals, organizations and/or internet sites claiming to represent Vaxcyte in recruitment activities. Vaxcyte has an established recruitment process for all positions prior to issuing an offer for employment and we will never extend unsolicited employment offers or ask candidates to provide financial or sensitive personal information as part of the application process. All legitimate communication from Vaxcyte will come from an official @vaxcyte.com email address. Qualified and interested candidates should apply to current openings at vaxcyte.com/careers.

 

Create a Job Alert

Interested in building your career at Vaxcyte? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...

This information helps us ensure a smooth transition into the role and avoid any potential conflicts. It will not automatically disqualify your application.

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Vaxcyte’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...