Job description

We are seeking an experienced Cloud Engineer with strong hands-on expertise in Microsoft Azure to help implement, manage, and optimize cloud infrastructure in a secure, scalable, and compliant manner. The selected candidate will collaborate closely with senior architects, security teams, and application developers to support the deployment, configuration, documentation, and governance of Azure environments. This role is ideal for a proactive engineer passionate about automation, cloud networking, and governance in a large-scale public-sector environment. The candidate will play a key role in supporting both new cloud deployments and the modernization of existing applications. Key Responsibilities: • Assist in the setup and configuration of core Azure subscriptions, resource groups, and environments. • Implement Azure Policies, RBAC permissions, and resource tagging standards in alignment with organizational governance. • Deploy and support Azure networking components such as VWAN, Azure Firewall, VNets, NSGs, Private Endpoints, VPN, and ExpressRoute. • Configure and manage Azure Application Gateways, Load Balancers, and related infrastructure components. • Contribute to infrastructure automation efforts using Bicep, ARM templates, and PowerShell scripting. • Troubleshoot connectivity and application issues, including hybrid network integrations between Azure and on-premises environments. • Participate in incident management, root cause analysis, and proactive issue prevention. • Support monitoring, alerting, and diagnostics configuration for Azure workloads. • Collaborate with architecture, development, and security teams to support continuous integration and infrastructure changes. • Enforce and promote cloud governance, compliance, and security best practices. Basic Qualification: • 4+ years of hands-on experience managing and deploying Azure landing zone architecture in enterprise environments. • 4+ years of strong proficiency in Azure networking, including VWAN, ExpressRoute, VPN, Azure Firewall, VNets, and hybrid connectivity. • 4+ years of experience designing "private-by-default" Azure environments and enforcing governance and security policies. • 4+ years of experience implementing and managing Azure Policies, RBAC roles, and resource tagging strategies. • 5+ years of demonstrated communication, documentation, and collaboration skills, with proven ability to work effectively across technical and business teams. Preferred Qualifications: • Microsoft Certifications such as AZ-104 (Azure Administrator), AZ-700 (Azure Network Engineer), AZ-305 (Azure Solutions Architect), or equivalent. • Experience supporting public-sector or large enterprise cloud environments. • Familiarity with DevOps and automation pipelines (Azure DevOps, GitHub Actions).

Requirements