Azure Cloud Engineer

Roles Responsibilities About the role We are hiring an Azure Cloud Engineer to own the design deployment security and daytoday operation of our Microsoft Azure environment You will be the person who keeps our cloud secure scalable highly available costefficient and auditready across ISO NIAF CIS Benchmarks and ITIL v4 governance This is a handson engineering role with endtoend ownership You will work alongside our cybersecurity SOC infrastructure application and business teams and report into IT Cloud operations What you ll do Cloud infrastructure architecture Design provision configure and manage Azure cloud infrastructure including virtual machines virtual networks storage accounts databases containers backup services and platform services Manage Azure subscriptions management groups resource groups policies naming conventions tagging standards and landing zone components Implement scalable and resilient cloud architectures aligned with business and technical requirements Administer hybrid connectivity including VPN ExpressRoute virtual network peering private endpoints DNS and secure routing Maintain cloud infrastructure documentation diagrams configuration baselines and operational runbooks Security governance Implement cloud security controls aligned with ISO NIAF CIS Benchmarks and internal security policies Configure and enforce IAM RBAC Conditional Access MFA Privileged Identity Management and leastprivilege access Enforce encryption for data at rest and in transit across cloud services Configure Microsoft Defender for Cloud Microsoft Defender Suite Microsoft Sentinel Azure Policy and security baselines Ensure cloud resources are configured securely and continuously monitored for misconfigurations risks and noncompliance Manage Entra ID integration with Azure resources applications and hybrid identity services Conduct periodic access reviews for privileged and standard cloud access Monitor elevated access activities and investigate privilege misuse or access anomalies Monitoring operations Configure Azure Monitor Log Analytics Application Insights Network Watcher and service health alerts Integrate cloud logs and security events with Microsoft Sentinel and other SIEM SOC monitoring platforms Monitor cloud performance availability security events resource utilization and compliance status Create operational dashboards compliance reports capacity reports and security posture reports Investigate cloud alerts related to suspicious activity failed authentication policy violations network exposure and configuration drift Coordinate with the SOC team to respond to cloud security incidents and threat exposure findings Cost resilience Monitor Azure consumption resource utilization reservations and cost trends Identify and remediate unused underutilized oversized or noncompliant resources Apply cost optimization strategies including rightsizing reserved instances savings plans storage tiering automation and lifecycle policies Implement Azure Backup Azure Site Recovery Recovery Services Vaults backup policies and recovery testing procedures Compliance change management Maintain cloud asset inventories access review records configuration baselines vulnerability remediation records and change documentation Ensure all cloud changes are documented approved tested and implemented through ITILaligned change management processes Maintain policies procedures standards runbooks and compliance dashboards related to cloud operations Work closely with application teams developers cybersecurity infrastructure SOC and business units to deliver secure and reliable cloud services Desired Candidate Profile Required 5 years handson experience in cloud administration engineering or operations strong focus on Microsoft Azure Proven experience designing deploying and managing Azure infrastructure compute networking storage backup monitoring security Solid grasp of Azure landing zones subscriptions management groups Azure Policy RBAC and governance Handson with Entra ID Azure RBAC Conditional Access MFA Entra PIM and leastprivilege models Experience in environments governed by ISO NIAF CIS Benchmarks and ITIL v4 Handson with Microsoft Defender for Cloud Defender Suite Microsoft Sentinel Azure Monitor Log Analytics Fortinet and Freshservice Strong knowledge of cloud security IAM PAM encryption secure networking vulnerability management and compliance reporting Experience with backup DR replication failover testing and resilience planning Solid understanding of hybrid connectivity firewalls VPNs private endpoints DNS and NSGs Strong troubleshooting documentation and stakeholdercommunication skills Preferred Bachelor s degree in IT Computer Science Cloud Computing or a related field Microsoft certifications AZ Azure Administrator AZ Azure Solutions Architect AZ Azure Security Engineer ITIL v4 certification Experience with infrastructureascode Bicep ARM or Terraform Prior work in a regulated or governmentadjacent environment