Senior Microsoft Azure Cloud & Infrastructure Engineer
Summary
Senior engineer who designs, secures, automates and runs enterprise-scale Microsoft Azure environments for customers: VMs, networking (Firewall, ExpressRoute), Entra ID security, Terraform/PowerShell infrastructure-as-code, Azure Monitor operations and on-call incident response, plus leading cloud migrations and mentoring junior engineers.
We are seeking a highly experienced Senior Microsoft Azure Cloud & Infrastructure Engineer to design, implement, secure, automate and manage Microsoft Azure environments for enterprise customers. The ideal candidate will possess strong hands-on technical expertise, enterprise architecture knowledge, troubleshooting capabilities and experience leading complex cloud infrastructure initiatives.
Key Responsibilities
1. Microsoft Azure Infrastructure Management
- Design, deploy, configure and manage enterprise-scale Azure infrastructure and cloud services.
- Administer Azure Virtual Machines, Virtual Networks, Storage Accounts, Azure App Services and Azure SQL.
- Manage Azure subscriptions, management groups, resource groups and Azure landing zones.
- Implement high availability, disaster recovery, backup and business continuity solutions.
- Monitor infrastructure performance, availability, scalability and capacity.
- Lead infrastructure modernization and cloud optimization initiatives.
2. Azure Networking & Connectivity
- Design and configure Azure VNets, subnets, NSGs, Azure Firewall, VPN Gateway and ExpressRoute.
- Manage Azure Application Gateway, Azure Load Balancer, Azure Front Door and Web Application Firewall.
- Implement private endpoints, Private Link, Azure DNS and hybrid connectivity.
- Troubleshoot complex network connectivity, routing, latency and security issues.
- Review network architecture and recommend security and performance improvements.
3. Cloud Security & Identity Management
- Implement Azure security best practices aligned with Microsoft Cloud Adoption Framework and Azure Well-Architected Framework.
- Configure Microsoft Entra ID, Conditional Access, MFA, RBAC and Privileged Identity Management.
- Manage Microsoft Defender for Cloud, Azure Policy and Azure Key Vault.
- Implement security monitoring, vulnerability remediation and cloud configuration hardening.
- Support compliance requirements such as ISO 27001, NIST, CIS Benchmarks and applicable regulatory frameworks.
- Conduct cloud security configuration reviews and support remediation of identified risks.
4. Automation & Infrastructure as Code
- Design and maintain Infrastructure as Code using Terraform, Bicep or ARM templates.
- Automate infrastructure deployment and operational tasks using PowerShell, Azure CLI and scripting.
- Work with Azure DevOps and GitHub Actions for CI/CD pipelines.
- Implement automated patch management, configuration management and infrastructure provisioning.
- Establish reusable deployment templates and infrastructure automation standards.
5. Monitoring, Operations & Incident Management
- Configure Azure Monitor, Log Analytics, Application Insights and alerts.
- Lead root cause analysis and resolution of critical infrastructure incidents.
- Manage backup, disaster recovery, patching and change management activities.
- Implement operational dashboards, monitoring standards and SLA reporting.
- Support business-critical production environments and participate in planned on-call rotations.
- Provide technical guidance to junior engineers during incident resolution.
6. Cloud Architecture & Optimization
- Lead cloud migration and modernization projects from on-premises and hybrid environments to Microsoft Azure.
- Conduct Azure infrastructure architecture reviews covering security, resilience, scalability and performance.
- Identify cost optimization opportunities using Azure Cost Management and FinOps practices.
- Prepare high-level and low-level architecture diagrams, technical documentation and operational runbooks.
- Participate in customer technical discussions, architecture reviews and implementation planning.
- Recommend cloud technology improvements aligned with customer business objectives.
7. Technical Leadership & Customer Engagement
- Act as a senior technical point of contact for enterprise Azure infrastructure engagements.
- Lead technical workshops, solution discussions and infrastructure design reviews.
- Mentor cloud engineers and provide technical oversight for implementation activities.
- Collaborate with cybersecurity, DevOps, infrastructure and compliance teams.
- Support technical assessments, solution proposals and customer presentations.
- Ensure technical deliverables meet quality, security and project requirements.
Required Technical Skills & Experience
- 813 years of overall IT infrastructure, cloud engineering and enterprise technology experience.
- Minimum 5 years of hands-on Microsoft Azure experience in administration, implementation and infrastructure management.
- Proven experience designing, deploying, securing and managing enterprise-scale Azure environments.
- Strong expertise in Azure IaaS, PaaS, networking, storage, compute and identity services.
- Hands-on experience with Azure Firewall, Application Gateway, Front Door, VPN Gateway and ExpressRoute.
- Experience managing Windows Server, Linux and hybrid infrastructure.
- Proficiency in PowerShell, Azure CLI, Terraform, Bicep or ARM templates.
- Experience with Azure Backup, Azure Site Recovery and disaster recovery planning.
- Strong understanding of cloud security architecture, Zero Trust principles and regulatory compliance.
- Experience leading cloud migrations, infrastructure modernization and complex troubleshooting.
- Ability to independently manage customer environments and provide architectural recommendations.
- Strong technical documentation, stakeholder communication and problem-solving skills.
Preferred Certifications
- Microsoft Certified: Azure Administrator Associate (AZ-104) Highly Preferred
- Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- Microsoft Certified: DevOps Engineer Expert (AZ-400)
- Terraform Associate Certification – Advantage
Additional Preferred Skills
- Experience with Microsoft 365, Intune, Microsoft Defender and Microsoft Sentinel.
- Exposure to Azure Kubernetes Service (AKS), Docker and containerized applications.
- Experience with hybrid cloud environments and enterprise migration projects.
- Understanding of Zero Trust Architecture and Cloud Security Posture Management.
- Familiarity with ITIL processes and enterprise change management.
- Experience supporting government, banking, healthcare or regulated enterprise customers.
- Experience with Azure governance, cost management and enterprise landing zone implementation.
Educational Qualifications
Bachelor's degree in Computer Science, Information Technology, Engineering or a related discipline. Equivalent professional experience and relevant Microsoft certifications will also be considered.
Key Competencies
- Strong analytical and advanced troubleshooting capabilities.
- Ability to independently manage complex enterprise Azure environments.
- Excellent communication and stakeholder management skills.
- Strong documentation and technical presentation capabilities.
- Leadership, mentoring and cross-functional collaboration skills.
- Proactive approach to cloud security, operational reliability and continuous improvement.
What We Offer
- Opportunities to work on enterprise-scale Microsoft Azure projects.
- Exposure to cloud architecture, cybersecurity and emerging technologies.
- Professional development and certification opportunities.
- Collaborative work environment with experienced cloud and cybersecurity professionals.
- Opportunities to work with international enterprise customers.
Skills
- AKS
- Analytics
- ARM Templates
- Automation
- Azure
- Azure Application Insights
- Azure DevOps
- Azure Monitor
- Bicep
- CI/CD
- CLI
- Cloud
- Cloud Security
- Cybersecurity
- DevOps
- DNS
- Docker
- Entra ID
- FinOps
- Firewall
- GitHub
- GitHub Actions
- IaaS
- IAM
- Infrastructure as Code
- Intune
- ISO 27001
- ITIL
- Kubernetes
- Linux
- Microsoft Defender
- Microsoft Sentinel
- Networking
- Nist
- PowerShell
- RBAC
- Regulatory Compliance
- Root Cause Analysis
- SQL
- Stakeholder Management
- Terraform
- Vault
- VPN
- Windows Server
- Zero Trust