Azure Cloud Engineer

About The Role

What You'Ll Do

• Cloud infrastructure & architecture
• Design, provision, configure, and manage Azure cloud infrastructure, including virtual machines, virtual networks, storage accounts, databases, containers, backup services, and platform services.
• Manage Azure subscriptions, management groups, resource groups, policies, naming conventions, tagging standards, and landing zone components.
• Implement scalable and resilient cloud architectures aligned with business and technical requirements.
• Administer hybrid connectivity, including VPN, ExpressRoute, virtual network peering, private endpoints, DNS, and secure routing.
• Maintain cloud infrastructure documentation, diagrams, configuration baselines, and operational runbooks.
• Security & governance
• Implement cloud security controls aligned with ISO 27001, NIAF, CIS Benchmarks, and internal security policies.
• Configure and enforce IAM, RBAC, Conditional Access, MFA, Privileged Identity Management, and least-privilege access.
• Enforce encryption for data at rest and in transit across cloud services.
• Configure Microsoft Defender for Cloud, Microsoft Defender Suite, Microsoft Sentinel, Azure Policy, and security baselines.
• Ensure cloud resources are configured securely and continuously monitored for misconfigurations, risks, and non-compliance.
• Manage Entra ID integration with Azure resources, applications, and hybrid identity services.
• Conduct periodic access reviews for privileged and standard cloud access.
• Monitor elevated access activities and investigate privilege misuse or access anomalies.
• Monitoring & operations
• Configure Azure Monitor, Log Analytics, Application Insights, Network Watcher, and service health alerts.
• Integrate cloud logs and security events with Microsoft Sentinel and other SIEM/SOC monitoring platforms.
• Monitor cloud performance, availability, security events, resource utilization, and compliance status.
• Create operational dashboards, compliance reports, capacity reports, and security posture reports.
• Investigate cloud alerts related to suspicious activity, failed authentication, policy violations, network exposure, and configuration drift.
• Coordinate with the SOC team to respond to cloud security incidents and threat exposure findings.
• Cost & resilience
• Monitor Azure consumption, resource utilization, reservations, and cost trends.
• Identify and remediate unused, underutilized, oversized, or non-compliant resources.
• Apply cost optimization strategies, including right-sizing, reserved instances, savings plans, storage tiering, automation, and lifecycle policies.
• Implement Azure Backup, Azure Site Recovery, Recovery Services Vaults, backup policies, and recovery testing procedures.
• Compliance & change management
• Maintain cloud asset inventories, access review records, configuration baselines, vulnerability remediation records, and change documentation.
• Ensure all cloud changes are documented, approved, tested, and implemented through ITIL-aligned change management processes.
• Maintain policies, procedures, standards, runbooks, and compliance dashboards related to cloud operations.
• Work closely with application teams, developers, cybersecurity, infrastructure, SOC, and business units to deliver secure and reliable cloud services.