Senior Azure Engineer

Job Purpose The Senior Azure Engineer is responsible for the design, implementation, automation, security, and operational support of the enterprise Microsoft Azure platform. This role serves as a senior technical resource for Azure infrastructure, cloud-native services, hybrid integration, governance, resiliency, and cost optimization. The position partners with Enterprise Architecture, Cybersecurity, Infrastructure, Networking, Application, and business technology teams to deliver secure, scalable, reliable, and cost-effective cloud solutions. Primary Objectives: - Azure Engineering: - Design and implement secure, scalable, highly available Azure solutions. - Cloud Modernization: - Lead migrations and modernization of on-premises and cloud workloads. - Automation: - Expand infrastructure-as-code, CI/CD, and repeatable platform engineering practices. - Security & Compliance: - Implement cloud security controls, policy, identity, and Zero Trust principles. - Operational Excellence: - Improve monitoring, reliability, disaster recovery, and support practices. - Governance & FinOps: - Strengthen standards, cost transparency, tagging, and consumption optimization. - Technical Leadership: - Mentor engineers and provide design guidance across projects and operations. Job Duties and Responsibilities Azure Architecture & Engineering * Design and implement Azure infrastructure supporting enterprise applications, shared services, and business capabilities.* Develop reusable architecture patterns, engineering standards, and deployment templates.* Lead Azure migration, modernization, scalability, availability, and resiliency initiatives.* Evaluate Azure services and recommend adoption based on business value, risk, supportability, and cost. Cloud Operations & Reliability * Administer Azure management groups, subscriptions, resource groups, and shared platform services.* Monitor platform health and performance using Azure Monitor, Log Analytics, Application Insights, and enterprise observability tools.* Troubleshoot complex infrastructure, networking, identity, security, and application connectivity issues.* Develop operational runbooks, recovery procedures, and platform service-level measures. Security & Compliance * Implement Azure Policy, Microsoft Defender for Cloud, Microsoft Entra ID, Azure Key Vault, and related security controls.* Partner with Cybersecurity teams on secure configurations, vulnerability remediation, risk reduction, and audits.* Apply least privilege, private connectivity, encryption, logging, and Zero Trust principles to cloud designs.* Ensure Azure solutions align with enterprise architecture, security, regulatory, and data protection requirements. Automation & DevOps * Develop infrastructure-as-code solutions using Terraform, Bicep, ARM templates, or equivalent technologies.* Automate provisioning, configuration, compliance, maintenance, and operational processes using PowerShell and Azure CLI.* Support CI/CD pipelines with Azure DevOps, GitHub Enterprise, and GitHub Actions.* Promote platform engineering, source control, peer review, testing, and reusable deployment practices. Networking & Hybrid Cloud * Design and support VNets, Network Security Groups, Azure Firewall, ExpressRoute, VPN gateways, private endpoints, DNS, and load balancing.* Enable secure connectivity among Azure, enterprise data centers, SaaS platforms, and manufacturing locations.* Partner with network and security teams on segmentation, routing, connectivity, performance, and troubleshooting. Governance, FinOps & Leadership * Implement resource tagging, policy, lifecycle, subscription, and cost allocation standar