Azure Cloud Engineer

Job Description Roles & Responsibilities About the role We are hiring an Azure Cloud Engineer to own the design, deployment, security, and day-to-day operation of our Microsoft Azure environment. You will be the person who keeps our cloud secure, scalable, highly available, cost-efficient, and audit-ready — across ISO 27001, NIAF, CIS Benchmarks, and ITIL v4 governance. This is a hands-on engineering role with end-to-end ownership. You will work alongside our cybersecurity, SOC, infrastructure, application, and business teams, and report into IT/Cloud operations. What you'll do Cloud infrastructure & architecture Design, provision, configure, and manage Azure cloud infrastructure, including virtual machines, virtual networks, storage accounts, databases, containers, backup services, and platform services. Manage Azure subscriptions, management groups, resource groups, policies, naming conventions, tagging standards, and landing zone components. Implement scalable and resilient cloud architectures aligned with business and technical requirements. Administer hybrid connectivity, including VPN, ExpressRoute, virtual network peering, private endpoints, DNS, and secure routing. Maintain cloud infrastructure documentation, diagrams, configuration baselines, and operational runbooks. Security & governance Implement cloud security controls aligned with ISO 27001, NIAF, CIS Benchmarks, and internal security policies. Configure and enforce IAM, RBAC, Conditional Access, MFA, Privileged Identity Management, and least-privilege access. Enforce encryption for data at rest and in transit across cloud services. Configure Microsoft Defender for Cloud, Microsoft Defender Suite, Microsoft Sentinel, Azure Policy, and security baselines. Ensure cloud resources are configured securely and continuously monitored for misconfigurations, risks, and non-compliance. Manage Entra ID integration with Azure resources, applications, and hybrid identity services. Conduct periodic access reviews for privileged and standard cloud access. Monitor elevated access activities and investigate privilege misuse or access anomalies. Monitoring & operations Configure Azure Monitor, Log Analytics, Application Insights, Network Watcher, and service health alerts. Integrate cloud logs and security events with Microsoft Sentinel and other SIEM/SOC monitoring platforms. Monitor cloud performance, availability, security events, resource utilization, and compliance status. Create operational dashboards, compliance reports, capacity reports, and security posture reports. Investigate cloud alerts related to suspicious activity, failed authentication, policy violations, network exposure, and configuration drift. Coordinate with the SOC team to respond to cloud security incidents and threat exposure findings. Cost & resilience Monitor Azure consumption, resource utilization, reservations, and cost trends. Identify and remediate unused, underutilized, oversized, or non-compliant resources. Apply cost optimization strategies, including right-sizing, reserved instances, savings plans, storage tiering, automation, and lifecycle policies. Implement Azure Backup, Azure Site Recovery, Recovery Services Vaults, backup policies, and recovery testing procedures. Compliance & change management Maintain cloud asset inventories, access review records, configuration baselines, vulnerability remediation records, and change documentation. Ensure all cloud changes are documented, approved, tested, and implemented through ITIL-aligned change management processes. Maintain policies, procedures, standards, runbooks, and compliance dashboards related to cloud operations. Work closely with application teams, developers, cybersecurity, infrastructure, SOC, and business units to deliver secure and reliable cloud services. Desired Candidate Profile Required 5+ years hands-on experience in cloud administration, engineering, or operations — strong focus on Microsoft Azure. Proven experience designing, deploying, and managing Azure infrastructure (compute, networking, storage, backup, monitoring, security). Solid grasp of Azure landing zones, subscriptions, management groups, Azure Policy, RBAC, and governance. Hands-on with Entra ID, Azure RBAC, Conditional Access, MFA, Entra PIM, and least-privilege models. Experience in environments governed by ISO 27001, NIAF, CIS Benchmarks, and ITIL v4. Hands-on with Microsoft Defender for Cloud, Defender Suite, Microsoft Sentinel, Azure Monitor, Log Analytics, Fortinet, and Freshservice. Strong knowledge of cloud security, IAM, PAM, encryption, secure networking, vulnerability management, and compliance reporting. Experience with backup, DR, replication, failover testing, and resilience planning. Solid understanding of hybrid connectivity, firewalls, VPNs, private endpoints, DNS, and NSGs. Strong troubleshooting, documentation, and stakeholder-communication skills. Preferred Bachelor's degree in IT, Computer Science, Cloud Computing, or a related field. Microsoft certifications: AZ-104 (Azure Administrator), AZ-305 (Azure Solutions Architect), AZ-500 (Azure Security Engineer). ITIL v4 certification. Experience with infrastructure-as-code (Bicep, ARM, or Terraform). Prior work in a regulated or government-adjacent environment. Employment Type Full Time Company Industry DefenceMilitaryGovernment Department / Functional Area IT Software Keywords AzureCloud Operations EngineerPowerShellCloud Platform EngineerCloud EngineeringCloud Solutions EngineerAzure AdministratorAzure DevOps Engineer Get real-time job updates only on our App