Description

Design, implement, and manage secure Azure environments across development, testing, and production landscapes.

This role is on-site.

Responsibilities

• Own Azure networking components including VNets, subnets, NSGs, private endpoints, and private DNS for secure connectivity.
• Implement ingress and API security using Azure Application Gateway (WAF v2) and Azure API Management (APIM) with secure backend integrations.
• Configure APIM policies for JWT validation, OAuth scopes, rate limiting, and API governance.
• Manage Microsoft Entra ID app registrations, OAuth2/JWT flows, Managed Identity, and least-privilege RBAC.
• Develop Infrastructure as Code using Bicep or Terraform and build CI/CD pipelines for infrastructure and container deployments.

Required Skills

• 9+ years of experience in Azure platform engineering and cloud infrastructure management.
• Expertise in Azure Networking: VNets, NSGs, private endpoints, and private DNS.
• Hands-on experience with Azure API Management (APIM) and Web Application Firewall (WAF).
• Proficiency in Infrastructure as Code (IaC) using Bicep or Terraform.
• Strong knowledge of Microsoft Entra ID, OAuth2/JWT, Managed Identity, and RBAC.
• Experience building CI/CD pipelines for cloud infrastructure and containerized workloads.
• Familiarity with Application Insights and Log Analytics for observability and monitoring.

Preferred Skills

• Bachelor's degree in Computer Science, IT, Engineering, or a related field.
• Experience with operational runbooks, SLOs, and incident handling procedures.

Key Skills

Education

Any Graduate