Azure Infrastructure Engineer

What you'll do

• Design and implement Azure landing zones with RBAC, Entra ID integration, and automated policy guardrails.
• Build secure virtual networks using subnets, route tables, NSGs, and Private Endpoints to isolate services.
• Provision and manage Azure Container Apps, App Services, Functions, VMs, and SQL Server instances.
• Partner with Java teams to containerize services, tune JVM performance, and manage CI/CD deployment pipelines.
• Enforce secrets management using Key Vault and implement least-privilege access controls across the platform.
• Establish SLOs, dashboards, and alerting via Azure Monitor while implementing autoscaling and cost controls.
• Automate infrastructure provisioning and environment parity using Terraform, Bicep, and GitOps workflows.
• Drive incident response, root-cause analysis, and the implementation of resilience patterns like circuit breaking.

What we're looking for

• Must have 5+ years of experience in cloud infrastructure or SRE with Azure.
• Must have hands-on experience with ACA, App Services, Functions, Private Endpoints, Key Vault, App Config, and SQL Server.
• Must have strong Java ecosystem familiarity including JVM tuning, Spring Boot microservices, containerization, and serverless batch patterns.
• Must be proficient in IaC (Terraform/Bicep), GitHub Actions/Azure DevOps, and GitOps workflows.
• Must possess security fundamentals including RBAC, Entra ID, MFA, secrets management, and compliance controls.
• Experience with messaging and data platforms like Event Hubs, Service Bus, Kafka/Confluent, and analytics (preferred).
• Experience with observability tooling (Prometheus/Grafana), performance testing, and cost optimization (preferred).
• AZ-104, AZ-305, or AZ-400 certifications (preferred).