Azure Infrastructure Engineer

Azure Infrastructure Engineer About the Role We are looking for a skilled and hands-on Azure Infrastructure Engineer with strong expertise in cloud-native infrastructure architecture and deployment on Microsoft Azure. The ideal candidate will have deep experience in setting up and managing Azure Landing Zones, designing enterprise-grade networks, implementing Kubernetes (AKS) clusters, configuring ExpressRoute, and working with Azure Stack, CLI, and infrastructure-as-code tooling. This is a pure infrastructure engineering role requiring direct technical execution, system design, troubleshooting, and secure provisioning across hybrid and multi-region environments. Key Responsibilities · Design, configure, and manage Azure Landing Zones, including identity, policy, subscription structure, network topology, and security controls · Deploy and manage Azure Kubernetes Service (AKS) clusters including node pools, autoscaling, ingress controllers, and identity integrations · Implement and optimize networking infrastructure including Virtual Networks (vNets), Subnets, Network Security Groups (NSGs), Azure Firewall, Application Gateways, and Private Endpoints · Set up hybrid connectivity via ExpressRoute, VPN gateways, vNet peering, and Site-to-Site/IPSec tunnels · Work with Azure AI Foundry infrastructure requirements, model hosting environments, and access/security isolation · Use Azure CLI, PowerShell, and Infrastructure-as-Code (ARM templates, Bicep) to automate resource provisioning and configuration · Configure and manage Azure Stack Hub and hybrid cloud deployments · Implement monitoring and diagnostics using Azure Monitor, Log Analytics, and Network Watcher · Ensure systems are compliant with high availability, backup, disaster recovery (DR), and security standards · Collaborate with cloud architects and security teams to validate designs and enforce architectural guardrails · Maintain detailed technical documentation, HLDs/LLDs, and environment runbooks Required Skills & Qualifications · Minimum 3 years of hands-on experience in Azure infrastructure engineering roles · Proficient with: o Azure Landing Zones and Cloud Adoption Framework (CAF) o Azure Networking: vNet, NSG, UDR, VPN Gateway, ExpressRoute o Kubernetes (AKS): Cluster design, scaling, policies, and deployment patterns o Azure Stack Hub/Edge, Azure CLI, and PowerShell automation o Azure Monitor, Log Analytics, and diagnostics tooling · Strong understanding of hybrid cloud models, network segmentation, service endpoints, and RBAC · Experience with IaC using Bicep, ARM, or equivalent tools · Ability to troubleshoot complex cloud issues involving routing, connectivity, and resource provisioning · Familiarity with identity and security principles: Managed Identities, Key Vault, and role-based access control · Excellent documentation habits with the ability to produce HLDs, LLDs, deployment guides, and SOPs Nice to Have · Microsoft certifications (AZ-104, AZ-305, AZ-700, AZ-400) · Experience with Terraform or GitHub Actions for IaC pipelines · Exposure to multi-region design and governance enforcement · Knowledge of cloud security architecture and compliance standards (CIS/NIST) What We Offer · Mission-critical projects in cloud modernization and infrastructure transformation · Access to the latest tools, partner engineering support, and certification tracks · Flexible and collaborative work culture focused on excellence and ownership · Competitive salary, certification sponsorship, and technical career growth