Cloud Engineer

La Fosse; Leinster; On-site; EUR 70,000 - 100,000; Full time

Job summary

La Fosse invites an experienced Azure Infrastructure Engineer to manage a large Azure estate (≈150 applications and 2,500 VMs) within PCI DSS compliance. You will monitor health, resolve incidents, implement changes, and drive reliability via automation and observability.

Responsibilities include IaC with Terraform/Azure Bicep, automation, and strong Windows Server administration across legacy to current versions, plus security hardening and documentation.

Qualifications

• Experience migrating workloads from VMware/ESX or private cloud into Azure.
• Windows Server administration across 2008–2022.
• Active Directory, DNS, certificates, service accounts, GPOs, IIS, and Windows dependencies.
• SQL Server: connectivity, backup, HA/DR, performance, support readiness.
• Strong PowerShell scripting ability.
• Azure networking (VNets, subnets, NSGs, routing, private connectivity).
• Terraform and/or Azure Bicep for IaC.
• ITSM / change-controlled environments.

Responsibilities

• Discovery and inventory of servers, apps, and configurations.
• Plan and execute application deployments and configuration changes.
• Investigate incidents; lead root-cause analysis and permanent fixes.
• Automate tasks (PowerShell, Bash, Python) and contribute to AIOps.
• Administer Azure compute, storage, and OS services.
• Design and tune monitoring, alerting, and dashboards to improve signal quality.
• Apply hardening, patching and access controls per PCI DSS and security standards.
• Contribute to IaC and configuration management for repeatable environments.
• Create and maintain runbooks and SOPs; mentor junior engineers.

Skills

VMware/ESX

Windows Server administration

Active Directory

DNS

Certificates

GPOs

IIS

Windows dependencies

SQL Server

PowerShell

ITSM / change control

Tools

Terraform

Azure Bicep

Job description

Location: Ireland / EU Contract type: Contract

About the Role

We are looking for an experienced Azure Infrastructure Engineer to support application infrastructure and reliability from discovery through to implementation. You'll work across a large-scale Azure estate - approximately 150 applications and 2,500 virtual machines - within a significant PCI DSS compliance scope.

Day to day, you'll monitor service health, resolve incidents, execute controlled changes, maintain patching and hardening standards, and drive reliability improvements through automation, observability, and clear operational documentation.

Key Responsibilities

• Infrastructure discovery & assessment - build and maintain an inventory of servers, applications, and configurations
• Change execution - plan and execute application deployments, configuration changes, and validation
• Incident response - investigate and resolve complex cross-platform incidents; lead root-cause analysis and drive permanent fixes
• Automation & AIOps - automate repetitive operational tasks and remediation (PowerShell, Bash, Python); contribute to AIOps and self-healing initiatives
• Cloud administration - administer compute, storage, and OS-layer services in Azure
• Observability & monitoring - implement and tune monitoring, alerting, and dashboards; improve signal quality and reduce noise
• Security & compliance - apply hardening, patching, and access controls in line with PCI DSS and internal security standards
• Infrastructure-as-code - contribute to IaC (Terraform) and configuration management for consistent, repeatable environments
• Documentation & mentoring - create and maintain runbooks and SOPs; mentor junior engineers

Must-Have Skills & Experience

• Proven experience migrating/supporting workloads from VMware/ESX or private cloud into Azure
• Strong Windows Server administration, including legacy versions (2008/2012) through modern (2016/2019/2022)
• Solid understanding of Active Directory, DNS, certificates, service accounts, GPOs, IIS, and Windows operational dependencies
• Good SQL Server infrastructure knowledge - connectivity, backup, HA/DR concepts, performance, support readiness
• Strong PowerShell scripting ability
• Experience with Azure networking (VNets, subnets, NSGs, routing, private connectivity, segmentation)
• Experience with Terraform and/or Azure Bicep
• Experience in ITSM / change-controlled environments

Required Certifications

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - preferred

Nice to Have

• Experience with Finance sector applications
• PCI DSS compliance experience
• Experience supporting legacy applications
• Familiarity with Coralogix

What Success Looks Like

Hands-on, reliable support across a large Azure cloud estate - ~150 applications and ~2,500 VMs - within a demanding PCI DSS compliance environment.

Interested candidates should submit an up-to-date CV highlighting relevant Azure, Windows, and SQL Server