Azure Systems Engineer

We are seeking a highly skilled Azure Systems Engineer to design, build, and operate cloud‑native platforms leveraging the Microsoft Azure ecosystem. This role is responsible for implementing secure, scalable, and resilient cloud services across compute, networking, identity, data, and DevOps. The ideal candidate has deep hands‑on experience with Azure PaaS services, Infrastructure‑as‑Code, Zero Trust patterns, and modern engineering practices.

This role will work closely with architects, developers, data engineers, and security teams to deliver enterprise‑grade cloud foundations and application platforms that support AI‑native, event‑driven, and microservices‑based workloads.

Key Responsibilities

Cloud Architecture & Engineering

• Design and implement Azure landing zones, hub‑and‑spoke networks, private endpoints, and secure connectivity patterns.
• Build and manage Azure PaaS services including:
• Azure App Services / Container Apps / AKS
• Azure Functions
• API Management
• Event Hub / Service Bus
• Azure SQL / Cosmos DB / Storage / ADLS Gen2
• Azure Key Vault (RBAC‑only, private endpoints, managed identities)
• Implement Zero Trust principles across identity, network, and data layers.

Infrastructure as Code (IaC)

• Develop and maintain IaC using Bicep, ARM, or Terraform.
• Build reusable modules for networking, compute, security, and data services.
• Implement GitHub Actions or Azure DevOps pipelines for automated deployments.

Security & Governance

• Enforce Azure Policies, RBAC, Conditional Access, and workload identity federation.
• Implement secure secret management using Key Vault and managed identities.
• Configure monitoring, diagnostics, and logging using Azure Monitor, Log Analytics, and Sentinel.

DevOps & Automation

• Build CI/CD pipelines for infrastructure and application deployments.
• Automate environment provisioning, configuration, and drift detection.
• Support containerized workloads using Azure Container Apps or AKS.

Operations & Reliability

• Implement observability patterns: metrics, logs, traces, alerts.
• Optimize cost, performance, and scalability of Azure workloads.
• Troubleshoot complex cloud issues across networking, identity, and application layers.

Required Skills & Experience

• 4–8+ years of hands‑on Azure engineering experience.
• Strong proficiency with Azure networking (VNETs, firewalls, VPN, ExpressRoute, private endpoints).
• Deep experience with Azure Identity (Entra ID, workload identities, RBAC).
• Strong IaC experience with Bicep (preferred), ARM, or Terraform.
• Experience with GitHub Actions, GitHub OIDC, and secure CI/CD patterns.
• Hands‑on experience with Azure Functions, API Management, Event Hub, Storage, and Cosmos DB.
• Strong understanding of Zero Trust, least privilege, and cloud security best practices.
• Experience with monitoring tools (Azure Monitor, Log Analytics, Application Insights).
• Ability to troubleshoot distributed systems and cloud-native architectures.

Preferred Qualifications

• Azure certifications (AZ‑104, AZ‑204, AZ‑305, AZ‑500).
• Experience with microservices, Dapr, or event-driven architectures.
• Experience supporting AI/ML workloads using Azure AI Foundry or Azure ML.
• Experience in P&C insurance platforms or ACORD-aligned data models (nice to have).

Soft Skills

• Strong communication and documentation skills.
• Ability to collaborate with cross-functional teams across architecture, security, and engineering.
• Ownership mindset with a focus on reliability, automation, and continuous improvement.
• Comfortable working in a fast-paced, architecture-driven environment.