Azure Infrastructure Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and manage Azure landing zones, management groups, virtual machines, storage solutions, backups, monitoring, and governance.

• Diagnose and resolve connectivity, performance, access, and availability challenges across VM, OS, network, DNS, firewall, and identity layers.

• Conduct root-cause analysis and apply sustainable solutions.

• Create runbooks and establish operational standards.

• Engage in incident response, change management, maintenance periods, and on-call duties.

• Design and troubleshoot VNets, NSGs, routing/UDRs, hub-and-spoke or Virtual WAN, Azure Firewall, VPN Gateway, and ExpressRoute.

• Develop Azure and on-premises name resolution strategies utilizing Private DNS, DNS Private Resolver, and conditional forwarding.

• Establish private connectivity to PaaS services through private endpoints.

• Facilitate application delivery utilizing Front Door, Application Gateway, load balancing, WAF, and TLS certificate lifecycle management.

• Collaborate with Networking on firewall rules, IP addressing, NAT, and connectivity across datacenters, branches, and third-party services.

• Plan and execute VMware and Windows migrations to Azure, including dependency assessment, Azure Migrate, lift-and-shift, test migrations, cutover, and post-migration support.

• Develop cutover plans, validation checklists, and rollback criteria; manage off-hours production cutovers.

• Provide support for Azure infrastructure related to SQL Server migrations.

• Maintain hybrid domain controllers, DNS, and Active Directory integration for Azure workloads.

• Design and validate disaster recovery solutions using Site Recovery, geo-redundant storage, and region/availability-zone configurations aligned with RTO and RPO objectives.

• Operate Azure Backup and assess backup and replication platforms; document and report on recovery test outcomes.

• Deliver infrastructure for App Service, Functions, Logic Apps, Service Bus, and API Management.

• Offer platform-level support for AKS alongside Application Development.

• Create, modify, and troubleshoot Terraform configurations using modules, remote state, environment separation, and drift management.

• Utilize Git pull requests and code reviews; sustain Azure DevOps infrastructure pipelines with approval gates and self-hosted agents.

• Automate operations through PowerShell and Azure CLI.

• Implement Entra ID, RBAC, PIM, Conditional Access, and managed identities.

• Enforce governance through Azure Policy, management groups, tagging, and Defender for Cloud.

• Collaborate with Security, Compliance, and Audit teams on PCI DSS, NIST, and CIS controls, remediation, and audit documentation.

• Construct Azure Monitor and Log Analytics alerts, workbooks, and dashboards; adjust alert sensitivity and logging volumes.

• Leverage Application Insights for tracing.

• Manage Azure expenditures using Cost Management, Advisor, reservations, and savings plans.

• Educate team members on Azure and cloud best practices while learning from other departments.

⛳️ Requirements

• Bachelor’s degree in IT, Computer Science, Engineering, or a related discipline; equivalent professional experience will be considered.

• Over 5 years of experience in enterprise infrastructure engineering, with at least 3 years of practical experience in Azure production environments.

• Proven experience with Azure VNets, NSGs, routing, DNS, and ExpressRoute or site-to-site VPN connections.

• Direct participation in the preparation for on-premises to Azure migrations, including cutover, rollback planning, and post-migration support.

• Solid understanding of VMware vSphere, Windows Server, Active Directory, DNS, and Group Policy.

• Experience with Azure Backup and Site Recovery or comparable disaster recovery designs that meet RTO/RPO targets.

• Proficiency in Terraform, PowerShell, Git, and Azure DevOps infrastructure pipelines.

• Familiarity with Entra ID, RBAC, least privilege access, and Azure Policy.

• Capable of independent troubleshooting and root-cause analysis for complex Azure challenges.

• Knowledge of supporting compliance requirements such as PCI DSS, NIST, CIS, or similar frameworks.

• Understanding of App Service, Functions, Logic Apps, Service Bus, API Management, Azure SQL Managed Instance, and SQL Server on Azure VMs.

• Familiarity with Azure Virtual Desktop/FSLogix, Bicep/ARM, Defender for Cloud, and Sentinel.

• Knowledge of AKS, Docker, Helm, and Cosmos DB.

• Current Azure certifications (AZ-104, AZ-305, AZ-700, AZ-500, AZ-400) or HashiCorp Terraform Associate certification preferred.

• Preference for experience in AKS platform operations, Azure SQL Managed Instance, IIS/.NET application migrations, PCI DSS audit evidence, CrowdStrike or similar security platforms, multi-site hybrid environments, mentoring peers, and AI tools.

• Availability for scheduled after-hours maintenance and cutover tasks, as well as occasional incident response and on-call duties as required.

• Candidates must demonstrate each required qualification with specific examples of their work as individual contributors.

🏝️ Benefits

• Remote work options available.

• Regular business hours with scheduled after-hours maintenance and cutover activities.

• Occasional travel for project-related tasks, meetings, or datacenter initiatives.