Description

Key Responsibilities

· Lead Azure landing-zone design, subscription governance, onboarding and steady-state operations.

· Manage Azure VM lifecycle, Managed Disks, snapshots and storage lifecycle policies.

· Create, harden and version-control golden images; administer patching through Azure Update Manager.

· Operate VNets, subnets, peering, routing, Private Link and Private Endpoints; support ExpressRoute and VPN Gateway.

· Operate Azure SQL and Cosmos DB, including backup, patching, scaling and performance tuning.

· Operate AKS clusters, node pools and namespace or tenant governance.

· Support Azure Functions, App Service, API Management, Service Bus and Event Grid integrations.

· Support Azure AI Foundry and Azure OpenAI endpoints, access, quotas and incident triage.

· Administer Azure DNS, Key Vault and Entra ID users, groups, roles, service principals and MFA.

· Lead Azure Monitor, Log Analytics, backup, restore and disaster-recovery activities.

Required Technical Expertise

· Azure VM, Managed Disks, Blob, Files, Load Balancer, VNet, Azure SQL, Cosmos DB, AKS and App Service.

· Azure landing zones, Management Groups, subscriptions and Azure Policy.

· Terraform, Bicep, ARM templates, Azure DevOps, GitHub Actions, PowerShell DSC and Ansible.

Operations, Governance and Service Management

· Manage Incident, Problem and Change activities for P0-P3 tickets through ServiceNow.

· Deliver services in line with SLAs and lead root-cause analysis.

· Maintain tagging, quota, policy and subscription governance.

· Maintain runbooks, dashboards and automation assets.

Preferred Training and Certifications

· Microsoft Certified: Azure Solutions Architect Expert (AZ-305).

· Microsoft Certified: Azure Administrator Associate (AZ-104).

· Microsoft Certified: DevOps Engineer Expert (AZ-400).

· ITIL V3 or V4 Foundation.

Success Profile

· Stable, secure and well-governed production services

Key Skills

Education

Any Gradute