Cloud Infrastructure Engineer

Summary/Objective

Security Risk Advisors Intl., LLC (SRA) is offering a Cloud Infrastructure Engineer position with a focus on Microsoft Azure. This role is responsible for designing, building, and operating secure, scalable, and resilient cloud infrastructure, including networking, identity integrations, compute, storage, and platform services.

The Cloud Infrastructure Engineer partners with internal IT, security, and engineering teams to standardize Azure landing zones, automate deployments using infrastructure-as-code, and ensure environments meet reliability, performance, and cost objectives.

• Design, build, and maintain Azure infrastructure using best practices for reliability, scalability, and operational excellence.
• Implement and operate Azure landing zones, subscriptions, management groups, and governance controls (RBAC, Azure Policy, tagging, resource organization).
• Engineer Azure networking solutions (VNets, subnets, NSGs, route tables, Private Link/private endpoints, VPN/Express Route, Azure Firewall) to meet connectivity and segmentation requirements.
• Automate provisioning and configuration using infrastructure-as-code (Terraform and/or Bicep/ARM) and integrate into CI/CD pipelines.
• Operate Azure compute and platform services (VMs, VMSS, AKS, App Service, Functions) including scaling, patching, upgrades, and lifecycle management.
• Design and manage Azure storage and data platform components (Storage Accounts, Azure Files, managed disks, backup targets) with appropriate performance and resiliency.
• Implement monitoring, logging, and alerting using Azure Monitor, Log Analytics, and Application Insights; improve observability and reduce mean time to recover.
• Partner with security teams to implement identity, key management, and baseline controls (Entra , PIM, Key Vault, Defender for Cloud) as part of the infrastructure standard.
• Support incident response and problem management for Azure services, including root cause analysis and implementation of corrective and preventative actions.
• Create and maintain technical documentation, diagrams, and runbooks for Azure architectures, operational procedures, and standards.
• Drive cost optimization and capacity planning efforts (e.g., right-sizing, reservations/savings plans, storage tiering) and provide clear recommendations to stakeholders.
• Plan and test business continuity and disaster recovery capabilities for Azure workloads (backup, restore, replication, failover) and validate RTO/RPO requirements.

• In-depth understanding of:
  • Microsoft Azure core services and architecture (subscriptions, resource groups, compute, storage, PaaS offerings) and how to design for scale and resiliency.
  • Azure networking concepts and services (VNets, NSGs, load balancing, DNS, Private Link, VPN/Express Route, Azure Firewall).
  • Azure governance and identity fundamentals (Azure Policy, RBAC, management groups, Entra , PIM) and practical application of least privilege.
  • Reliability engineering principles (high availability, fault domains, scaling, observability) and secure-by-default infrastructure patterns.
• Working knowledge of:
  • Infrastructure-as-code and configuration management practices, including Terraform and/or Bicep/ARM templates.
  • Azure Dev Ops/Git Hub-based CI/CD for infrastructure and platform deployments (pipelines, approvals, environments, secrets management).
  • Monitoring, logging, and troubleshooting in Azure using Azure Monitor, Log Analytics, Application Insights, and KQL.
  • Backup, recovery, and resiliency tooling (Azure Backup, Recovery Services Vault, Site Recovery) and practical DR testing.
• Basic experience with:
  • Operating production cloud platforms, including on‑call/incident response, root cause analysis, and continuous improvement.
  • Container and platform operations experience (AKS and related ecosystem: ingress, certificates, secrets, node pools, upgrades).
  • Cloud cost management and optimization practices (Azure Cost Management, budgeting, tagging discipline, forecasting).
• Moderate experience with:
  • Scripting and automation using Python, Power Shell, or Bash.
  • Automation using Azure‑native services such as Azure Automation, Logic Apps, Functions, and…