Azure Cloud Engineer

Overview

Azure Cloud Engineer

What you'll do

• Cloud infrastructure & architecture
• Design, provision, and manage Azure infrastructure — VMs, virtual networks, storage, databases, containers, backup, and platform services.
• Own subscriptions, management groups, resource groups, Azure Policy, naming, tagging, and landing zone components.
• Administer hybrid connectivity: VPN, ExpressRoute, VNet peering, private endpoints, DNS, and secure routing.
• Maintain infrastructure documentation, diagrams, configuration baselines, and operational runbooks.
• Security & governance
• Implement cloud security controls aligned to ISO 27001, NIAF, CIS Benchmarks, and internal policy.
• Configure and enforce IAM, RBAC, Conditional Access, MFA, Privileged Identity Management, and least-privilege access.
• Enforce encryption at rest and in transit across all cloud services.
• Operate Microsoft Defender for Cloud, Microsoft Defender Suite, Microsoft Sentinel, Azure Policy, and security baselines.
• Continuously monitor for misconfigurations, drift, and non-compliance.
• Manage Entra ID integration with Azure resources, applications, and hybrid identity.
• Conduct periodic access reviews; investigate elevated-access anomalies.
• Monitoring & operations
• Configure Azure Monitor, Log Analytics, Application Insights, Network Watcher, and service health alerts.
• Integrate cloud logs and security events with Microsoft Sentinel and SIEM/SOC monitoring.
• Build operational dashboards, compliance reports, capacity reports, and security posture reports.
• Investigate alerts on suspicious activity, failed authentication, policy violations, and network exposure.
• Coordinate with the SOC team on cloud security incidents.
• Cost & resilience
• Monitor Azure consumption, reservations, and cost trends.
• Apply right-sizing, reserved instances, savings plans, storage tiering, and lifecycle policies.
• Operate Azure Backup, Azure Site Recovery, and Recovery Services Vaults; run periodic recovery drills.
• Compliance & change management
• Maintain cloud asset inventories, access review records, configuration baselines, vulnerability remediation records, and change documentation.
• Ensure all cloud changes follow ITIL-aligned change management — documented, approved, tested, implemented.
• What you bring

Required

• **5+ years**
• hands-on experience in cloud administration, engineering, or operations — strong focus on Microsoft Azure.
• Proven experience designing, deploying, and managing Azure infrastructure (compute, networking, storage, backup, monitoring, security).
• Solid grasp of Azure landing zones, subscriptions, management groups, Azure Policy, RBAC, and governance.
• Hands-on with

Entra ID

• , Azure RBAC, Conditional Access, MFA, Entra PIM, and least-privilege models.
• Experience in environments governed by
• ISO 27001, NIAF, CIS Benchmarks, and ITIL v4
• .
• Hands-on with
• Microsoft Defender for Cloud, Defender Suite, Microsoft Sentinel, Azure Monitor, Log Analytics, Fortinet, and Freshservice
• .
• Strong knowledge of cloud security, IAM, PAM, encryption, secure networking, vulnerability management, and compliance reporting.
• Experience with backup, DR, replication, failover testing, and resilience planning.
• Solid understanding of hybrid connectivity, firewalls, VPNs, private endpoints, DNS, and NSGs.
• Strong troubleshooting, documentation, and stakeholder-communication skills.

Preferred

• Bachelor's degree in IT, Computer Science, Cloud Computing, or a related field.
• Microsoft certifications:

Az-500

• (Azure Security Engineer).
• **ITIL v4**
• certification.
• Experience with infrastructure-as-code (Bicep, ARM, or Terraform).
• Prior work in a regulated or government-adjacent environment.