Job Summary
Architecture & Design • Design enterprise scale Azure IaaS architectures (VMs, networking, storage). • Define HA, DR, and scalability strategies using Availability Zones, ASR, and Load Balancers. • Lead cloud migration and modernization initiatives (lift and shift, refactor). • Create and review HLD/LLD, DR runbooks, and SOPs. Azure IaaS Operations (L3) • Handle L3 escalations related to Azure VMs, disks, networking, and performance issues. • Perform root cause analysis (RCA) and permanent fixes. • Act as escalation point for production outages and DR events. • Coordinate with Microsoft Support for platform issues. Networking • Design and manage Hub Spoke / vWAN architectures. • Configure ExpressRoute, VPN, NSGs, Azure Firewall, UDRs. • Implement secure ingress using Load Balancer, Application Gateway, Front Door. Security & Identity • Implement Azure AD, RBAC, Managed Identity, and Zero Trust principles. • Enforce Defender for Cloud, disk encryption, JIT access, and Bastion. • Ensure compliance with enterprise security and audit standards. Backup, DR & Business Continuity • Design and manage Azure Backup and Azure Site Recovery. • Define and validate RTO/RPO with business stakeholders. • Plan and execute DR drills and document outcomes. Governance & Cost Optimization • Implement Azure Landing Zones, Management Groups, Policies, and tagging. • Optimize cost using right sizing, Reservations, Savings Plans. • Monitor and control spend using Azure Cost Management. Automation & Monitoring • Automate provisioning using ARM/Bicep/Terraform. • Implement monitoring with Azure Monitor, Log Analytics, Alerts. • Integrate Azure monitoring with ITSM tools.
Key Responsibilities
Architecture & Design • Design enterprise scale Azure IaaS architectures (VMs, networking, storage). • Define HA, DR, and scalability strategies using Availability Zones, ASR, and Load Balancers. • Lead cloud migration and modernization initiatives (lift and shift, refactor). • Create and review HLD/LLD, DR runbooks, and SOPs. Azure IaaS Operations (L3) • Handle L3 escalations related to Azure VMs, disks, networking, and performance issues. • Perform root cause analysis (RCA) and permanent fixes. • Act as escalation point for production outages and DR events. • Coordinate with Microsoft Support for platform issues. Networking • Design and manage Hub Spoke / vWAN architectures. • Configure ExpressRoute, VPN, NSGs, Azure Firewall, UDRs. • Implement secure ingress using Load Balancer, Application Gateway, Front Door. Security & Identity • Implement Azure AD, RBAC, Managed Identity, and Zero Trust principles. • Enforce Defender for Cloud, disk encryption, JIT access, and Bastion. • Ensure compliance with enterprise security and audit standards. Backup, DR & Business Continuity • Design and manage Azure Backup and Azure Site Recovery. • Define and validate RTO/RPO with business stakeholders. • Plan and execute DR drills and document outcomes. Governance & Cost Optimization • Implement Azure Landing Zones, Management Groups, Policies, and tagging. • Optimize cost using right sizing, Reservations, Savings Plans. • Monitor and control spend using Azure Cost Management. Automation & Monitoring • Automate provisioning using ARM/Bicep/Terraform. • Implement monitoring with Azure Monitor, Log Analytics, Alerts. • Integrate Azure monitoring with ITSM tools.
Skill Requirements
AZ 104 – Azure Administrator • AZ 305 – Azure Solutions Architect Expert • ITIL / Security certifications (optional)
Other Requirements
• AZ 104 – Azure Administrator • AZ 305 – Azure Solutions Architect Expert • ITIL / Security certifications (optional)