Azure Cloud Engineer

Job description

Sapiens is looking for a Senior Azure Infrastructure Engineer to join our Corporate IT / Infrastructure team. You will design, build, remediate, and improve Sapiens’ corporate Azure infrastructure, translating target architectures and security standards into reliable production solutions. You will also act as hands-on delivery partner and technical deputy to the Lead Azure Infrastructure Engineer.
If you are a senior cloud infrastructure professional who wants deep technical ownership across Azure landing zones, networking, Entra ID/AD integration, and automation, this role offers direct influence over the corporate Azure foundation.

Location: Bengaluru
Working Model: Our flexible work arrangement combines both remote and in-office work, optimizing flexibility and productivity.

What you’ll do:
The role is responsible for designing, deploying, remediating, and improving Sapiens’ corporate Azure infrastructure. The scope is corporate Azure only (non-product and non-customer environments). The ideal candidate is a senior technical specialist who takes difficult engineering work end to end, from design through handover and operations.

Key Responsibilities
Azure infrastructure engineering
• Design, deploy, and troubleshoot management groups, subscriptions, virtual networks, routing, DNS, private endpoints, connectivity, compute, storage, and other corporate Azure services.
• Implement and improve landing-zone configurations, Azure Policy initiatives, RBAC, tagging, resource standards, and environment guardrails based on agreed architecture.
• Investigate and remediate security and configuration gaps, and raise architectural decisions that require the Lead Engineer’s approval.
Identity, security, and transformation
• Implement and troubleshoot Entra ID and Active Directory integrations, synchronization, authentication, access provisioning, and related security controls.
• Own assigned identity rationalization migration work packages, including dependency analysis, automation, testing, cutover, rollback procedures, and post-migration validation.
• Implement least-privilege access, Conditional Access, privileged access processes, secrets and certificate practices, logging, and vulnerability remediation in collaboration with the CISO team.
Automation, delivery, and operational readiness
• Create and maintain infrastructure-as-code modules and automation using Terraform or Bicep, PowerShell, and Git-based engineering practices.
• Review HSO and internal implementation outputs for corporate Azure, identity, and Dynamics 365 integration dependencies, and escalate unresolved design risks.
• Partner with the Cloud Engineer on complex incidents, root-cause analysis, performance, monitoring, backup and recovery, and operational improvements. Produce useful runbooks and diagrams.
• Coordinate deployment interfaces and shared automation standards with the application DevOps team, without assuming ownership of application pipelines or the IDP.

Must Have Skills
• 7+ years of relevant infrastructure experience, including substantial hands-on engineering with enterprise Microsoft Azure.
• Strong Azure networking, subscription and management group, landing-zone configuration, policy, RBAC, logging, and platform security experience.
• Practical implementation experience with Microsoft Entra ID, Active Directory, and hybrid identity, with confidence troubleshooting identity and access failures.
• Hands-on PowerShell plus Terraform or Bicep, with a good understanding of Git, change control, and repeatable deployment approaches.
• Experience diagnosing complex cloud incidents, managing production changes, and delivering documented solutions from design through operations.
• Ability to execute technical work independently, challenge assumptions, and mentor engineers while operating within approved architecture.
Preferred Qualifications
• Microsoft Certified: Azure Administrator Associate (AZ-104). Azure Solutions Architect Expert or Security/Identity certifications are advantageous.
• Experience with Azure Monitor, Log Analytics/KQL, Defender for Cloud, backup and recovery, and cost optimization.
• Experience supporting Dynamics 365-related infrastructure integrations or supplier-managed transformation programs.

What We Are Looking For
A senior, hands-on Azure infrastructure engineer who combines deep technical implementation skills with engineering leadership. You will be accountable for the detailed delivery and technical quality of assigned infrastructure changes. You will contribute architecture options, while the Lead Engineer holds overall authority for the corporate Azure target state and identity design. You will also provide technical escalation and coaching to the Cloud Engineer.
You will work closely with the Lead Azure Infrastructure Engineer, Azure Cloud Engineer, CISO and Security team, enterprise application owners, HSO, and the DevOps/Platform Engineering team.

Position Success
• Agreed priority Azure gaps are closed, with tested configurations and change evidence.
• Identity migration work packages are completed successfully, with dependency and rollback documentation.
• Version-controlled IaC and reusable deployment patterns are used more widely for corporate Azure changes.
• Recurring incidents and configuration drift are reduced, and operational handover quality improves.
• Design decisions translate into secure, supportable production infrastructure.
• Reporting line, employment location, grade, and operational coverage are to be confirmed through Sapiens’ hiring process.

About Sapiens:
Sapiens is a global leader in the insurance industry, delivering its award-winning, cloud-based SaaS insurance platform to over 600 customers in more than 30 countries. Sapiens’ platform offers pre-integrated, low-code capabilities to accelerate customers’ digital transformation. With more than 40 years of industry expertise, Sapiens has a highly professional team of over 5,000 employees globally.
For More information visit us on www.sapiens.com.

Sapiens is an equal opportunity employer. We value diversity and strive to create an inclusive work environment that embraces individuals from diverse backgrounds.

Disclaimer: Sapiens India does not authorise any third parties to release employment offers or conduct recruitment drives via a third party. Hence, beware of inauthentic and fraudulent job offers or recruitment drives from any individuals or websites purporting to represent Sapiens . Further, Sapiens does not charge any fee or other emoluments for any reason (including without limitation, visa fees) or seek compensation from educational institutions to participate in recruitment events. Accordingly, please check the authenticity of any such offers before acting on them and where acted upon, you do so at your own risk. Sapiens shall neither be responsible for honouring or making good the promises made by fraudulent third parties, nor for any monetary or any other loss incurred by the aggrieved individual or educational institution.
In the event that you come across any fraudulent activities in the name of Sapiens , please feel free report the incident at sapiens to [email protected].