Azure Cloud Engineer

Company Name

ARS-Rescue Rooter

The Azure Cloud Engineer designs, implements, secures, automates, and supports enterprise Microsoft Azure environments, including cloud infrastructure, Azure Virtual Desktop (AVD), cloud migrations, and Dev Ops automation using CI/CD and Infrastructure-as-Code (IaC). The role delivers secure, scalable, resilient hybrid-cloud solutions and partners across Infrastructure, Security, Networking, Database, and Application Development teams on Zero Trust, PCI DSS compliance, SQL/data-platform migrations, and application modernization.

Key Responsibilities

Cloud Architecture & Azure Virtual Desktop

• Design, deploy, maintain, and optimize secure, highly available Azure IaaS environments, including VMs, storage, backup, monitoring, recovery, landing zones, governance, and operational baselines.
• Design and administer AVD environments, including host pools, session hosts, images, application delivery, scaling, user experience, and FSLogix.
• Secure and automate AVD using Entra , Conditional Access, MFA, RBAC, Zero Trust, Terraform, Power Shell, Azure CLI, and Azure Dev Ops.

Cloud Migration, Dev Ops & Automation

• Plan and execute on-premises infrastructure and application migrations to Azure, including readiness assessments, modernization, re-platforming, remediation, and hybrid transition support.
• Design and maintain Azure Dev Ops CI/CD pipelines and IaC using Terraform, Bicep, ARM templates, Power Shell, Azure CLI, and YAML.
• Establish version control, release management, automated validation, repeatable deployment standards, and technical/operational documentation.
• Partner with database teams on Azure infrastructure for SQL Server Always On to Azure SQL Managed Instance and SQL Server to Cosmos DB migrations, including networking, sizing/capacity, backup/recovery, monitoring, and cutover support.
• Support modernization of IIS-hosted applications through containerization, CI/CD, and deployment to Kubernetes/AKS in partnership with application development teams.

Identity, Networking & Security

• Administer Entra , Conditional Access, Identity Governance, PIM, RBAC, MFA, access reviews, service identities, and segregation-of-duties controls.
• Design and enforce Zero Trust, least-privilege access, segmentation, and micro segmentation across Azure environments.
• Design and support hybrid connectivity and application delivery using Express Route, VPN Gateway, Virtual WAN, VNets, routing, DNS, Azure Firewall, Front Door, Application Gateway, load balancing, NSGs, ASGs, and private endpoints.
• Partner with network teams to integrate Azure with datacenter, branch, and third-party connectivity.

Compliance, Governance & Operations

• Support Microsoft Defender for Cloud, Microsoft Sentinel, logging, alerting, threat detection, vulnerability remediation, and cloud security monitoring.
• Design and maintain solutions supporting PCI DSS and enterprise security requirements, including access control, encryption, segmentation, monitoring, vulnerability management, and audit evidence.
• Partner with Security, Compliance, and Audit teams on PCI assessments, remediation, evidence collection, and control validation; align practices with PCI DSS, NIST, CIS Controls, and CIS Azure Benchmarks.
• Monitor and optimize Azure performance, availability, resiliency, cost, and security posture.
• Develop platform standards, operational procedures, runbooks, implementation plans, and support documentation.
• Participate in incident response, problem management, root cause analysis, maintenance, and change management while providing technical guidance across technology teams.

Work Details

• Regular business hours with occasional after-hours maintenance, migrations, incidents, or production changes.
• Participation in change management, operational support, and on-call activities as required.
• Occasional travel for meetings, datacenter activities, vendor engagements, or project work.

Required Qualifications

• Bachelor’s degree in IT, Computer Science, Engineering, or related field; equivalent professional experience considered.
• 5+ years of enterprise infrastructure engineering experience, including 3+ years of hands-on…