Cloud Engineer

Design and Implement Infrastructure as Code (IaC)

• Develop and maintain modular, secure Terraform configurations for deploying Azure resources.
• Utilize version-controlled code (Git Hub) with state management and remote backends.
• Create reusable Terraform modules to standardize infrastructure provisioning.

• Develop Git Hub Actions workflows for Terraform plans/applies and Docker builds/deployments.
• Integrate code linting, security scanning, approvals, and environment gates into pipelines.

• Translate business and application requirements into cloud-native and hybrid Azure solutions.
• Deploy services such as containers, App Services, VNets, Azure SQL, Key Vault, Storage Account, Private Link, Managed SQL, and Azure Backup.

• Migrate legacy IaaS workloads to Azure PaaS or container platforms.
• Design hybrid cloud solutions integrating on-prem systems with Azure (e.g., VPN/Express Route Virtual Network Gateway, Azure Arc, Private Link).
• Assess and remediate technical debt and outdated architecture.

• Enforce enterprise standards using Azure Policy, RBAC, tagging policies, and cost control mechanisms.
• Manage secrets with Azure Key Vault and implement secure identity practices (managed identities, MFA).

• Set up monitoring and alerting using Azure Monitor, Log Analytics, Microsoft Sentinel, etc.
• Create dashboards and alert rules for proactive incident detection.
• Develop and maintain Standard Operating Procedures (SOPs) for common operational issues and escalations.
• Work cross-functionally with developers, architects, operations, and security teams to deliver infrastructure aligned with application needs.
• Review code, mentor team members, and promote Dev Ops best practices.

• Maintain comprehensive technical documentation, including architecture diagrams, deployment guides, CI/CD pipeline workflows, operational runbooks, and disaster recovery procedures.
• Conduct internal knowledge-sharing sessions and training.
• Evaluate and adopt emerging Azure services, Dev Ops tools, and Terraform capabilities.
• Identify automation opportunities to streamline workflows and reduce manual operations.
• Continuously optimize cloud costs, performance, and resource usage.

• Strong understanding of Azure compute services:
  Virtual Machines, VMSS, App Services, AKS.
• Deep knowledge of Azure networking: VNets, Subnets, NSGs, UDRs, VPN Gateway, Express Route, Private Link.
• Familiarity with Azure storage options:
  Blob, File Shares, Disks, and backup solutions.
• Experience with Azure PaaS services:
  Azure SQL, Cosmos DB, Application Gateway, Azure Functions, Logic Apps.

• Proficient in Terraform:
  Writing clean and modular Terraform code, backend configuration and remote state management, work spaces and environment separation, and using the Azure
  
  RM provider effectively.
• Familiarity with Bicep or ARM templates.

• Deep understanding of Git fundamentals: branching, merging, PRs, versioning.
• Experience with Git Hub Actions (or equivalents like Azure Dev Ops Pipelines):
  Building pipelines for infrastructure and application delivery, managing secrets and environment approvals, and integrating security scans and validations.

• Writing Dockerfile, building, and securing container images.
• Managing multi-stage builds and custom base images.
• Understanding container orchestration concepts and experience with Azure Kubernetes Service (AKS), Kubernetes YAML manifests or Helm charts, and Azure Container Registry (ACR) usage and access control.
• Knowledge of Azure Automation Accounts, runbooks, function apps, and webhooks.
• Scripting skills in Power Shell and/or Bash for automation and task orchestration.

• Strong understanding of Azure AD / Entra , user and group management, Role-Based Access Control (RBAC), Conditional Access policies, and MFA.
• Managed Identities, Service Principals, and Key Vault integration.
• Experience with Azure Cost Management & Billing tools.
• Knowledge of budgeting, forecasting, and usage analytics.
• Strategies for cost optimization:
  Reserved Instances, autoscaling, rightsizing, eliminating idle resources.
• Proficient with Azure Monitor, Log Analytics, and Application Insights.
• Familiarity with Microsoft Sentinel for security monitoring (optional).
• Ability to design custom dashboards, alerts, and automated responses, and troubleshooting skills using logs, metrics, and network tracing.

• Understanding of traditional IT infrastructure concepts: data centers, IaaS, hypervisors (VMware/Hyper-V).
• Experience with cloud migrations:
  Lift-and-shift vs refactor/re-platform, hybrid networking scenarios, integration of on-prem…