Senior Azure Engineer

Job Purpose

The Senior Azure Engineer is responsible for the design, implementation, automation, security, and operational support of the enterprise Microsoft Azure platform. This role serves as a senior technical resource for Azure infrastructure, cloud-native services, hybrid integration, governance, resiliency, and cost optimization. The position partners with Enterprise Architecture, Cybersecurity, Infrastructure, Networking, Application, and business technology teams to deliver secure, scalable, reliable, and cost-effective cloud solutions.

Primary Objectives:

• Azure Engineering:

• Design and implement secure, scalable, highly available Azure solutions.

• Cloud Modernization:

• Lead migrations and modernization of on-premises and cloud workloads.

• Automation:

• Expand infrastructure-as-code, CI/CD, and repeatable platform engineering practices.

• Security & Compliance:

• Implement cloud security controls, policy, identity, and Zero Trust principles.

• Operational Excellence:

• Improve monitoring, reliability, disaster recovery, and support practices.

• Governance & FinOps:

• Strengthen standards, cost transparency, tagging, and consumption optimization.

• Technical Leadership:

• Mentor engineers and provide design guidance across projects and operations.

Job Duties and Responsibilities

Azure Architecture & Engineering

• Design and implement Azure infrastructure supporting enterprise applications, shared services, and business capabilities.
• Develop reusable architecture patterns, engineering standards, and deployment templates.
• Lead Azure migration, modernization, scalability, availability, and resiliency initiatives.
• Evaluate Azure services and recommend adoption based on business value, risk, supportability, and cost.

Cloud Operations & Reliability

• Administer Azure management groups, subscriptions, resource groups, and shared platform services.
• Monitor platform health and performance using Azure Monitor, Log Analytics, Application Insights, and enterprise observability tools.
• Troubleshoot complex infrastructure, networking, identity, security, and application connectivity issues.
• Develop operational runbooks, recovery procedures, and platform service-level measures.

Security & Compliance

• Implement Azure Policy, Microsoft Defender for Cloud, Microsoft Entra ID, Azure Key Vault, and related security controls.
• Partner with Cybersecurity teams on secure configurations, vulnerability remediation, risk reduction, and audits.
• Apply least privilege, private connectivity, encryption, logging, and Zero Trust principles to cloud designs.
• Ensure Azure solutions align with enterprise architecture, security, regulatory, and data protection requirements.

Automation & DevOps

• Develop infrastructure-as-code solutions using Terraform, Bicep, ARM templates, or equivalent technologies.
• Automate provisioning, configuration, compliance, maintenance, and operational processes using PowerShell and Azure CLI.
• Support CI/CD pipelines with Azure DevOps, GitHub Enterprise, and GitHub Actions.
• Promote platform engineering, source control, peer review, testing, and reusable deployment practices.

Networking & Hybrid Cloud

• Design and support VNets, Network Security Groups, Azure Firewall, ExpressRoute, VPN gateways, private endpoints, DNS, and load balancing.
• Enable secure connectivity among Azure, enterprise data centers, SaaS platforms, and manufacturing locations.
• Partner with network and security teams on segmentation, routing, connectivity, performance, and troubleshooting.

Governance, FinOps & Leadership

• Implement resource tagging, policy, lifecycle, subscription, and cost allocation standards.
• Monitor cloud consumption and recommend rightsizing, reservation, licensing, and architecture optimization opportunities.
• Provide technical leadership, mentoring, design reviews, architecture governance, and project consultation.
• Coordinate with vendors and internal teams and serve as an escalation point for complex Azure issues.

Education and Qualifications

Education

Bachelor's degree, or regional equivalent, in Information Technology, Computer Science, Engineering, or a related discipline. An equivalent combination of education and relevant professional experience may be considered.

Experience

• 8+ years of infrastructure, systems, platform, or cloud engineering experience.
• 7+ years of hands-on Microsoft Azure engineering experience in a medium-to-large enterprise environment.
• Experience designing, deploying, and supporting enterprise-scale Azure and hybrid cloud environments.
• Experience leading cloud migrations, modernization initiatives, infrastructure automation, and resiliency improvements.
• Working knowledge of cloud governance, security, networking, identity, monitoring, disaster recovery, and FinOps practices.

Technical Skills

• Azure services: Virtual Machines, Storage, App Service, Functions, AKS, Azure SQL, Monitor, Backup, Site Recovery, Key Vault, Policy, Defender for Cloud, and Microsoft Entra ID.
• Automation and DevOps: Terraform, Bicep, ARM templates, PowerShell, Azure CLI, Azure DevOps, GitHub Enterprise, GitHub Actions, and CI/CD pipelines.
• Networking: TCP/IP, DNS, routing, firewalls, VPN, load balancing, ExpressRoute, private endpoints, and hybrid connectivity.
• Operations: Incident, problem, change, configuration, capacity, availability, and asset lifecycle management practices.

Language

• English fluency in reading, writing, and speaking; multilingual capability is a plus.

Preferred Certifications and Experience

• Microsoft Certified: Azure Solutions Architect Expert, Azure Administrator Associate, or DevOps Engineer Expert.
• HashiCorp Terraform Associate and/or ITIL Foundation certification.
• Experience supporting manufacturing or operational technology environments.
• Experience integrating Azure with ServiceNow CMDB/ITSM and observability platforms such as Splunk, Datadog, Dynatrace, or Microsoft Sentinel.

Additional Skills

• Strong analytical, troubleshooting, prioritization, and technical decision-making skills.
• Ability to communicate complex technical concepts clearly to engineering, architecture, cybersecurity, operations, and leadership stakeholders.
• Ability to work independently and collaboratively, manage multiple priorities, and follow through on commitments.
• Strong customer focus, documentation discipline, continuous-improvement mindset, and willingness to learn new technologies.
• Ability to mentor team members, influence without direct authority, and lead technical work across global teams.

Skills

Strategy: Ability to Think and Act in a Strategic Way

• Leads and acts consistently with company strategy and values.
• Demonstrates strategic problem solving, sound judgment, and strong business and technical acumen.
• Balances speed, reliability, cybersecurity, cost, and operational sustainability in decisions.

Talent: Ability to Build and Develop Talent

• Shares knowledge and mentors engineers and administrators.
• Demonstrates continuous learning and supports the development of others.
• Creates reusable standards and practices that improve team capability.

Approach: Ability to Engage Effectively and Solve Problems

• Builds trust and collaborates across global, cross-functional teams.
• Communicates clearly with technical and non-technical stakeholders.
• Demonstrates professional presence, curiosity, accountability, and constructive challenge.

Results: Ability to Achieve Planned Outcomes

• Acts with initiative and urgency while maintaining engineering quality.
• Drives measurable improvements in reliability, security, automation, delivery speed, and cost efficiency.
• Adapts to change and leverages available resources to deliver sustainable results.