Senior Azure Infrastructure Engineer with Cloud Security, Digital Services Platform
About the Position
We are looking for a Senior Azure Infrastructure Engineer to support cloud infrastructure operations, security related engineering activities, and platform reliability initiatives. In this role, you will work across Azure infrastructure provisioning, identity and access management, certificate and DNS administration, vulnerability management, and infrastructure automation. You will play a key role in maintaining secure and scalable cloud environments while supporting continuous improvement of operational practices and platform services.
About the Project
The project focuses on supporting and enhancing a cloud based digital services platform hosted on Microsoft Azure. The platform requires reliable infrastructure operations, secure identity management, vulnerability remediation, automation, and cloud governance to ensure high availability, security, and operational efficiency across multiple environments.
About the Team
You will work within a cross functional infrastructure and engineering team that collaborates closely with security specialists, software engineers, platform teams, and business stakeholders. The team supports multiple environments and follows structured processes for change management, automation, security, and service reliability.
Responsibilities
- Provision and manage Azure infrastructure resources across development, testing, staging, and production environments
- Manage cloud storage, database capacity, and infrastructure scaling activities
- Support environment replication, data synchronization, and platform maintenance tasks
- Configure, monitor, and troubleshoot Azure networking components, including Application Gateway and Web Application Firewall configurations
- Manage SSL and TLS certificate lifecycles and support DNS administration activities
- Configure and maintain Microsoft Entra ID Conditional Access policies and application registrations
- Support identity and access management processes, including role based access control and privileged access management
- Manage access requests for cloud services, applications, and development environments
- Track, assess, and remediate infrastructure vulnerabilities and security findings
- Support operating system patching and vulnerability management processes across cloud environments
- Assist with SIEM integration, monitoring, and log source migration initiatives
- Support secure connectivity solutions and Zero Trust network access technologies
- Troubleshoot and maintain internal applications, portals, and platform services
- Develop and maintain Terraform modules for infrastructure provisioning and configuration management
- Build and enhance Azure DevOps pipelines to support automated deployment and release processes
- Review and remediate Active Directory and Group Policy security findings
- Manage Azure Firewall policies and Network Security Group configurations
- Communicate progress, risks, and technical challenges to stakeholders and delivery teams
Requirements
- Experience administering Microsoft Azure infrastructure in production environments
- Strong knowledge of Azure services, including Virtual Machines, Storage Accounts, Azure SQL Managed Instance, Azure Functions, Key Vault, Application Gateway, and Web Application Firewall
- Experience with Infrastructure as Code using Terraform
- Hands on experience building and maintaining Azure DevOps CI/CD pipelines
- Knowledge of Microsoft Entra ID, Conditional Access policies, application registrations, and access management concepts
- Experience managing SSL and TLS certificates and DNS services
- Understanding of cloud networking, firewall management, and network security principles
- Experience with vulnerability management, patching processes, and CVE remediation
- Knowledge of Linux and Windows server administration
- Familiarity with SIEM platforms, log monitoring, and security event management
- Experience working across development, testing, and production environments
- Understanding of Active Directory, Group Policy, and identity security best practices
- Strong troubleshooting and problem solving skills
- Experience collaborating with infrastructure, security, and engineering teams
Nice to Have
- Experience with CyberArk or similar privileged access management solutions
- Experience with Cloudflare services and secure connectivity technologies
- Knowledge of Zero Trust architecture principles
- Experience with CrowdStrike NGSIEM or Microsoft Sentinel
- Experience supporting healthcare, financial services, or other regulated environments
- Knowledge of MongoDB administration
- Experience with Zscaler or similar secure access platforms
- Familiarity with Jira Service Management
- Experience implementing cloud security and governance best practices
Technologies
Microsoft Azure, Virtual Machines, Storage Accounts, Azure SQL Managed Instance, Azure Functions, Azure Key Vault, Azure Application Gateway, Web Application Firewall, Microsoft Entra ID, Conditional Access, App Registrations, Terraform, Azure DevOps, CI/CD, Cloudflare, Cloudflare Tunnel, CyberArk, CrowdStrike NGSIEM, Microsoft Sentinel, MongoDB, SFTP, Zscaler, ZPA, Active Directory, Group Policy, Azure Firewall, Network Security Groups, Jira Service Management
