Description

Cloud Engineer is needed to perform the following duties: Design, deploy, and manage Azure PaaS services including App Services, Web Apps, Function Apps, Logic Apps, Service Bus, API Management, Key Vaults, and Storage Accounts. Configure and maintain App Service Plans, deployment slots, autoscaling rules, and custom domain/SSL bindings for Web Apps. Build and manage Azure Function Apps using consumption and premium plans; implement triggers, bindings, and Durable Functions for orchestration workflows. Administer Logic Apps (Standard and Consumption) for enterprise integration patterns, connecting to hundreds of connectors and on-premises data gateways. Manage Azure Service Bus namespaces, queues, topics, and subscriptions for reliable asynchronous messaging between distributed systems. Configure and operate Azure API Management (APIM) including policies, rate limiting, OAuth2 security, developer portals, and backend API transformations. Administer Azure Key Vaults for secrets, certificates, and key lifecycle management; enforce RBAC and access policies across teams and applications. Provision and manage Azure Storage Accounts including Blob, Table, Queue, and File Share services; configure tiering, lifecycle policies, and redundancy options. Provision, configure, and manage AKS clusters including node pools, autoscaling (cluster and horizontal pod autoscaler), and system/user node pool separation. Deploy containerized workloads to AKS using Helm charts, Kustomize, and GitOps pipelines via Azure DevOps or GitHub Actions. Implement AKS networking models (kubenet, Azure CNI), configure ingress controllers (NGINX, Azure Application Gateway Ingress Controller), and manage network policies. Integrate AKS with Azure Container Registry (ACR), Key Vault (CSI driver), Azure Monitor, and managed identities (Workload Identity). Perform cluster upgrades, node image updates, and rolling deployments; implement pod disruption budgets and maintenance windows. Troubleshoot pod scheduling failures, OOM events, network connectivity issues, and persistent volume claim binding problems Design, build, and maintain CI/CD pipelines in Azure DevOps (Pipelines, Repos, Artifacts) and GitHub Actions for .NET, Java, and Python application stacks. Develop and maintain Terraform modules for Infrastructure as Code (IaC) deployments across Azure subscriptions, including state management with Azure Blob backend and remote state locking. Implement multi-stage pipelines with automated testing gates, artifact versioning, environment-specific variable groups, and approval workflows. Build and manage Azure Data Factory (ADF) pipelines for data ingestion, transformation, and orchestration; version-control ADF artifacts via Git integration. Create and maintain SQL pipelines using DACPAC and BACPAC for schema migrations, database deployments, and data-tier exports across environments. Use Azure CLI and PowerShell scripting to automate resource provisioning, configuration drift detection, and routine operational tasks. Implement pipeline security best practices including service principal least privilege, managed identity usage, and secrets sourced from Key Vault. Maintain, enhance, and operate Flask and FastAPI-based Python APIs deployed as Azure App Services, Function Apps, or containerized AKS workloads. Implement RESTful API endpoints, request validation (Pydantic models), authentication middleware (OAuth2/JWT), and response serialization. Integrate Python APIs with Azure SQL Databases, Storage Accounts, Service Bus, Key Vault, and Azure Cognitive/AI services via SDK. Perform code reviews, dependency upgrades, and security patching for Python backend services; manage virtual environments and requirements files.Configure ASGI/WSGI server settings (Gunicorn, Uvicorn), health probes, logging to Azure Monitor, and Application Insights SDK instrumentation. Debug production issues using distributed tracing, log queries in Log Analytics (KQL), and performance profiling. Plan and execute cross-tenant Azure migrations including subscription transfers, resource group moves, and full tenant-to-tenant migrations for VMs, PaaS services, and databases. Manage Azure Active Directory / Entra ID configurations including user provisioning, group management, Conditional Access policies, and Privileged Identity Management (PIM). Design and implement Azure Virtual Networks (VNet), subnets, Network Security Groups (NSGs), Azure Firewall, Application Gateway, and ExpressRoute/VPN connectivity. Configure Azure Private Endpoints, Private DNS Zones, and service endpoints to secure PaaS service access within VNet boundaries. Implement Azure RBAC, managed identities, and Entra ID app registrations to enforce least-privilege access across multi-subscription environments. Perform tenant-to-tenant migrations for Power Platform environments, Azure DevOps organizations, and Microsoft 365 workloads with minimal business disruption. Assess pre-migration dependencies using Azure Migrate, document runbooks, and conduct post-migration validation testing Provision and manage Azure SQL Databases, Elastic Pools, and SQL Managed Instances; configure DTU/vCore sizing, geo-replication, and auto-failover groups. Design and maintain Azure Data Factory (ADF) pipelines including Linked Services, Datasets, Integration Runtimes (self-hosted and Azure), and pipeline triggers. Perform database schema deployments using DACPAC (schema-only) and BACPAC (schema + data) via Azure DevOps pipelines and SqlPackage.exe. Monitor SQL performance using Query Performance Insight, Intelligent Insights, and Log Analytics; implement index tuning and query optimization recommendations. Configure Transparent Data Encryption (TDE), Advanced Threat Protection, SQL Auditing, and firewall rules for SQL Databases. Manage backup retention policies, point-in-time restore (PITR), and long-term retention (LTR) to meet business RPO/RTO requirements. Administer Power BI workspaces, datasets, dataflows, gateways, and capacity assignments; enforce row-level security (RLS) and tenant governance policies. Manage Power Apps environments, Dataverse solutions, and connection references; perform environment backup, restore, and cross-environment solution deployments. Administer and migrate Power Automate cloud flows and desktop flows (RPA); manage connections, approvals, and Data Loss Prevention (DLP) policies. Execute cross-tenant Power Platform migrations by exporting/importing Dataverse solutions, reconfiguring environment variables, and remapping connections post-migration. Configure Power Platform CoE (Center of Excellence) Starter Kit for governance, inventory, and adoption monitoring across the tenant. Integrate Power Platform with Azure services including Key Vault, Azure AD, Logic Apps, and SharePoint via custom connectors. Configure Azure Monitor, Log Analytics Workspaces, and Application Insights for end-to-end observability of infrastructure, PaaS services, and applications. Create and manage Alerts, Action Groups, and Dashboards; build KQL queries for operational reports and anomaly detection. Implement Microsoft Defender for Cloud recommendations; manage Security Score, regulatory compliance assessments, and Just-In-Time VM access. Configure Azure Policy initiatives and assignments for resource tagging, allowed regions, SKU restrictions, and diagnostic settings enforcement. Manage Azure Cost Management budgets, cost alerts, and reserved instance recommendations to optimize cloud spend across subscriptions. Conduct routine access reviews, audit log reviews, and respond to security incidents in coordination with the security operations team. Maintain and renew Azure certifications (e.g., AZ-104: Azure Administrator, AZ-400: DevOps Engineer Expert, AZ-204: Developer Associate, DP-900: Data Fundamentals) to validate expertise. Evaluate new Azure services, preview features, and platform updates; prepare technical briefings and architecture decision records (ADRs) for stakeholders. Document runbooks, operational procedures, architecture diagrams, and post-incident reviews for internal knowledge base. Collaborate with development teams, project managers, and business stakeholders to translate technical requirements into Azure solution designs. Provide Tier-3 escalation support; troubleshoot complex cross-service issues using Azure Support, resource health, activity logs, and vendor documentation. Mentor junior engineers on Azure best practices, Terraform coding standards, and DevOps pipeline design. Bachelor's Degree is required in Computer Science or Computer Engineering or Applied Computer Science or Computer Information Systems.

Key Skills

Education

Any Graduate