Azure Infrastructure Engineer

Job title: Azure Infrastructure Engineer

About the Role Azure Infrastructure Engineer will design, build, and operate secure, scalable Azure cloud platforms; own core Azure infrastructure while enabling high‑velocity delivery of JVM/Spring Boot services on ACA, App Services, and serverless runtimes. You’ll collaborate with software engineers, SRE, security, and architecture to ensure reliability, observability, and enterprise compliance.

What You'll Do

• Design and implement Azure landing zones and subscriptions with RBAC, Entra ID integration, MFA, and tagging standards; automate guardrails with policy and role assignments.
• Build secure virtual networks (VNets), subnets, route tables, NSGs, and Private Endpoints/Private Link.
• Provision and manage compute/services: ACA, App Services, Functions, VMs, App Config, Key Vault, and SQL Server; define transition patterns from on‑prem to Azure.
• Partner with Java teams to containerize services, tune JVM, and deploy to ACA/App Services; standardize CI/CD pipelines and blue/green/canary rollouts.
• Implement serverless schedules for Java workloads using Functions time triggers; automate batch jobs.
• Enforce secrets management, least‑privilege access, and Entra ID RBAC groups; support data security patterns for analytics (encryption at rest, backups).
• Establish SLOs/SLIs, dashboards, alerts via Azure Monitor/Log Analytics; enable autoscaling and cost controls.
• Drive incident response, root‑cause analysis, and post‑mortems; apply resilience patterns (health probes, retry/backoff, circuit breaking).
• Automate infrastructure with Terraform/Bicep, GitOps, and pipelines; maintain parity across dev/test/prod.
• Contribute design docs and runbooks; socialize standards for naming, tagging, and environment isolation; review cloud designs for security and compliance.

What We're Looking For

• 5+ years in cloud infrastructure or SRE with Azure (networking, compute, storage, identity, security).
• Hands‑on with ACA, App Services, Functions, Private Endpoints/Private Link, Key Vault, App Config, SQL Server.
• Strong Java ecosystem familiarity: JVM tuning, Spring Boot, packaging, containerization, deployment to ACA/App Services; serverless batch patterns.
• IaC (Terraform/Bicep), GitHub Actions/Azure DevOps, and GitOps workflows.
• Security fundamentals: RBAC, Entra ID, MFA, secrets management, and compliance controls.

Nice to Have

• Experience with messaging and data platforms (Event Hubs, Service Bus, Kafka/Confluent) and analytics (SQL Server).
• Observability tooling (Prometheus/Grafana), performance testing, and cost optimization.
• Certifications: AZ‑104, AZ‑305, AZ‑400.

Compensation & Benefits

• Salary range: USD 99,600 – 169,200 per year.
• Comprehensive benefits: retirement (401k and pension), health/dental/vision, spend‑based accounts, disability, PTO, parental and caregiver leave, life and accident insurance, and other voluntary benefits. Bonus program may include equity.