Cloud Engineer

Tridiagonal Ai; Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Tridiagonal Ai is seeking a seasoned Azure Infrastructure professional in Pune to lead design, automation, and governance of cloud resources. You will implement IaC across ARM/Bicep/Terraform, manage hybrid environments with Azure Arc, and optimize costs while ensuring secure, reliable deployments.

Extensive hands-on work with VMs, networking, DevOps tooling, and container orchestration (Docker/Kubernetes) is required to deliver scalable cloud architectures and robust CI/CD pipelines in a

Qualifications

• Azure Infrastructure certification is a plus.
• Hands-on experience with Azure IaaS and PaaS, networking, and VMs.
• Experience automating infrastructure using ARM/Terraform/Bicep.

Responsibilities

• Design, configure, and manage Azure IaaS/PaaS (VMs, VNets, NSGs, storage).
• Set up RBAC, policies, resource naming; enforce governance.
• Automate provisioning with IaC tools (ARM/Bicep/Terraform).
• Manage hybrid environments via Azure Arc, VPNs, ExpressRoute.
• Implement cost controls with Azure Cost Management and tagging.
• Build CI/CD pipelines for infra and apps (Azure DevOps, GitHub Actions).
• Integrate tests, security scans, and validations in pipelines.
• Manage environments, secrets, and artifact versioning.
• Deploy blue/green or canary strategies; ensure high availability.
• Containerize with Docker and deploy via AKS or App Services.
• Set up monitoring (Azure Monitor, Log Analytics, App Insights).
• Champion DevSecOps and secure-by-design practices.

Skills

Azure IaaS/PaaS

IaC (ARM/Bicep/Terraform)

Azure Arc & ExpressRoute

RBAC & IAM

CI/CD pipelines

Docker & AKS

Azure Monitor & Logs

Cost optimization

Networking & VPNs

Automation (PowerShell)

Security & DevSecOps

Windows/Linux admin

Tools

ARM Templates

Bicep

Terraform

Azure DevOps

GitHub Actions

Docker

AKS

App Services

Azure CLI/PowerShell

Kubernetes

Job description

Role & responsibilities

Essential Duties and Key Competencies

• A certified Azure Infrastructure professional
• Experience of Azure IoT services, Datalake, VMs, Networking
• Design, configure, and manage Azure IaaS and PaaS services (VMs, VNets, NSGs, Storage, etc.)
• Set up resource groups, role-based access control (RBAC), Azure Policies, and naming conventions.
• Automate infrastructure provisioning using Infrastructure as Code (IaC) tools like ARM Templates, Bicep, or Terraform.
• Manage hybrid environments via Azure Arc, VPNs, and ExpressRoute.
• Implement cost optimization strategies using Azure Cost Management, budgets, and resource tagging.
• Design and maintain CI/CD pipelines using Azure DevOps Pipelines or GitHub Actions for both infrastructure and applications.
• Integrate unit tests, code quality checks, security scans, and deployment validations in pipelines.
• Manage pipeline environments, approvals, secrets, and artifact versioning.
• Implement blue-green, canary, or rolling deployments for high availability.
• Collaborate with developers to containerize applications using Docker and deploy with AKS or Azure App Services.
• Set up DevOps toolchains (Git, Azure Repos, Boards, Pipelines, Artifacts).
• Champion DevSecOps practices by integrating security early in the development lifecycle.
• Drive shift-left testing, infrastructure testing, and automated validations.
• Enforce Git branching strategies and environment-specific configurations.
• Enable self-service provisioning for dev/test environments using IaC templates.
• Implement Azure Monitor, Log Analytics, and Application Insights for observability.
• Configure alerts, dashboards, and workbooks for proactive monitoring.
• Set up Service Health alerts and Action Groups for incident response.
• Ensure backup, recovery, and disaster recovery using Azure Backup and Site Recovery (ASR).
• Conduct routine health checks, performance tuning, and SLA compliance audits.
• Deploy workloads like web apps, APIs, containers, serverless functions, and databases.
• Manage dependencies, configurations, scaling policies, and certificates/secrets during deployment.
• Use Deployment Slots, Feature Flags, and App Config for controlled rollouts.
• Validate deployments with post-deployment gates, smoke tests, and rollback mechanisms.
• Coordinate with stakeholders to align deployments with business timelines and change windows.
• Analyze existing infrastructure and recommend cost-effective, scalable, and secure architecture patterns.
• Refactor legacy workloads to cloud-native solutions (e.g., Functions, AKS, Logic Apps).
• Implement network and security hardening using Firewall, NSGs, Private Endpoints, and Key Vault.
• Apply Well-Architected Framework and Cloud Adoption Framework principles.
• Promote governance, compliance, and automation-first approach.
• Azure CLI, PowerShell, ARM, Bicep, Terraform
• Azure DevOps, GitHub Actions
• Monitoring tools: Azure Monitor, Application Insights, Log Analytics
• Networking, security, IAM (RBAC, Conditional Access)
• Containers: Docker, Kubernetes (AKS)
• Windows/Linux server administration