Senior DevOps Engineer, Azure Infrastructure – Networking

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Develop and maintain cloud infrastructure for a client based in the US.

• Establish and oversee Azure environments, including governance, security, and monitoring.

• Utilize Infrastructure as Code principles with Bicep or Terraform via GitHub pipelines.

• Administer Microsoft 365 and identity infrastructure.

• Execute migrations for SharePoint and OneDrive.

• Design and manage hybrid Azure networking with VPN Gateway, BGP, hub-and-spoke architecture, and FortiGate.

• Diagnose network performance and routing challenges.

• Oversee Azure Functions, Key Vault, and Azure Virtual Desktop services.

• Facilitate the migration of databases and clients across a WAN, encompassing replication, performance testing, cutover, and rollback.

⛳️ Requirements

• Proven hands-on experience in constructing Azure environments from the ground up, involving management groups, subscriptions, Azure Policy, RBAC/PIM, Log Analytics, and Microsoft Defender.

• Proficiency in Infrastructure as Code with Bicep or Terraform, implemented through GitHub pipelines.

• Familiarity with Microsoft Entra ID and cloud synchronization from on-premises Active Directory.

• Experience with Microsoft Intune, Conditional Access, and Windows Hello.

• Background in SharePoint and OneDrive migrations.

• Knowledge of Azure VPN Gateway with BGP across multiple circuits.

• Expertise in hub-and-spoke network architecture utilizing a FortiGate firewall.

• Experience resolving issues related to latency, jitter, and asymmetric routing.

• Understanding of Azure Functions integrated with VNet.

• Proficiency in Azure Key Vault.

• Familiarity with Azure Virtual Desktop (AVD).

• Experience in migrating databases and their clients across a WAN, involving replication, performance testing, cutover, and rollback.

• Hands-on experience with Azure, including Entra ID, SharePoint, and networking.

• General knowledge of networking and VPN technologies.

• Experience in Windows server/instance administration.

• Capability to work according to US Eastern Time (EST) for at least 50% of the time.

• No vacation is permitted during the first 1–2 months of the engagement.

🏝️ Benefits

• B2B contract with Bonapolia.

• One contract and a single monthly invoice.

• Monthly payments, typically on a 30-day schedule aligned with client payments.

• Contract governed by the laws of the candidate's country.

• Bonapolia manages client-related paperwork, including MSA, NDA, and invoicing.