Cloud Infrastructure Engineer

Location: Mexico City, Mexico City, Mexico

Department: Information Technology

Workplace: hybrid

Description

Concord sits at the center of the credit market ecosystem. We provide loan servicing, backup servicing, and capital markets administration for specialty finance lenders, institutional investors, and asset managers. Our clients include originators across fintech, solar, home improvement, equipment finance, and other specialty asset classes. When a lender needs a trusted partner to service their portfolio or a trustee needs real-time reporting, they call Concord. 

We are looking for a skilled Cloud Infrastructure Engineer to join our Infrastructure organization and serve as the primary hands-on owner of our Azure environments. This role works in close partnership with our Cloud Infrastructure Architect, translating architectural designs and standards into reliable, secure, and well-documented infrastructure.

Our Azure footprint has grown significantly through recent acquisitions, and this role will be central to the ongoing operation, maintenance, and security hardening of those environments. You will bring deep Azure expertise and a strong cloud networking background, working alongside our DevOps team to ensure our hybrid environment is consistent, compliant, and well-managed.

This is a technical execution role for someone who takes pride in maintaining things the right way, following defined standards, and contributing to a mature, process-driven infrastructure organization.

Resposibilities

• Maintain and operate Azure infrastructure in accordance with architectural designs and standards defined by the Cloud Infrastructure Architect
• Manage and support Azure resources, including virtual machines, storage accounts, App Services, and related compute and platform services
• Execute workload assessments on acquired Azure environments, documenting the current state and identifying gaps against enterprise standards
• Carry out remediation and consolidation work as directed, following approved change management procedures
• Own the day-to-day configuration and maintenance of Azure networking components, including VNets, subnets, NSGs, Azure Firewall, ExpressRoute, VPN Gateways, Private Endpoints, and DNS
• Implement and maintain hub-and-spoke and other network topologies across acquired and native Azure environments
• Troubleshoot complex network connectivity issues across hybrid and multi-environment Azure infrastructure
• Support network integration projects as acquired Azure environments are rationalized and connected to the broader enterprise network
• Maintain and enforce Azure security controls in alignment with SOC 2 and PCI-DSS compliance requirements
• Manage Azure Active Directory / Entra ID configurations and RBAC policies; partner with the InfoSec team on conditional access and identity governance
• Support vulnerability remediation and security posture improvement using tools such as Microsoft Defender for Cloud or equivalent
• Ensure infrastructure changes are documented and auditable in accordance with change management policies
• Work from architectural blueprints, runbooks, and procedures authored by the Cloud Infrastructure Architect and VP of Infrastructure
• Document configurations, network diagrams, and operational procedures to maintain an accurate and current infrastructure knowledge base
• Collaborate with the T2 Systems Administration team on escalated issues and cross-functional infrastructure projects
• Participate in on-call rotation for critical Azure infrastructure incidents

Requirements

• 5+ years of experience in IT infrastructure, with at least 3 years of hands-on Azure implementation and operations experience
• Strong Azure networking expertise: VNets, NSGs, Azure Firewall, ExpressRoute, VPN Gateway, Private Link/Endpoints, DNS, and load balancing
• Experience working in regulated financial services environments (banking, insurance, fintech, or similar)
• Working knowledge of Azure Active Directory / Entra ID, RBAC, and identity and access management
• Demonstrated experience with SOC 2 and PCI-DSS compliance in a cloud environment
• Active Microsoft Certified: Azure Administrator Associate certification
• Active Microsoft Certified: Azure Network Engineer Associate certification
• Ability to work from architectural designs, standards documents, and technical runbooks
• Strong documentation habits and attention to detail in change management processes

Preferred Qualifications

• Experience assessing and remediating cloud environments inherited through mergers or acquisitions
• Familiarity with Azure Monitor, Log Analytics, and observability tooling
• Exposure to AWS networking concepts (helpful for cross-team collaboration with our DevOps team)
• Microsoft Certified: Azure Solutions Architect Expert

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Family Leave (Maternity, Paternity)
• Short-Term & Long-Term Disability
• Wellness Resources