Security Engineer

iLink Digital; Chennai District; On-site; INR 2,600,000 - 4,200,000; Full time

Job summary

iLink Digital is seeking an experienced infrastructure and cloud engineer to design and implement Azure Landing Zones, migrate workloads from on-premises to Azure, and automate deployments using IaC tools. The role requires strong networking, security, and enterprise-scale governance experience across large environments.

Ideal candidates will have 7+ years in infra/cloud, 4+ years Azure, and hands-on experience with Terraform, Bicep, ARM templates, and Azure DevOps.

Qualifications

• 7+ years of experience in infrastructure engineering, cloud engineering, or enterprise infrastructure.
• 4+ years of hands-on Azure experience.
• Proven experience designing and implementing Azure Landing Zones.
• Experience migrating enterprise workloads from on-premises datacenters to Azure.

Responsibilities

• Design and implement Azure Landing Zones based on CAF and best practices.
• Migrate Windows and Linux workloads to Azure using recommended migration waves and tooling.
• Automate infrastructure deployment using IaC with Terraform, Bicep, or ARM templates.
• Provide technical recommendations to architects and leadership and document runbooks.

Skills

Azure Landing Zones

Azure migration

Networking & security

IaC (Terraform/Bicep/ARM)

Azure DevOps / GitHub Actions

PowerShell

ExpressRoute/VPN

Monitoring & automation

Tools

Terraform

Bicep

ARM Templates

PowerShell

Azure DevOps

GitHub Actions

Job description

iLink Digital is aGlobal Software Solution Provider and SystemsIntegrator, delivers next-generation technologysolutions to help clients solve complex businesschallenges, improve organizational effectiveness,increase business productivity, realize sustainableenterprise value and transform your businessinside-out. iLink integrates software systems and developscustom applications, components, and frameworks on the latestplatforms for IT departments, commercial accounts, applicationservices providers (ASP) and independent software vendors(ISV). iLink solutions are used in a broad range of industriesand functions, including healthcare, telecom, government, oiland gas, education, and life sciences. iLink’s expertiseincludes Cloud Computing & Application Modernization, DataManagement & Analytics, Enterprise Mobility, Portal,collaboration & Social Employee Engagement, EmbeddedSystems and User Experience designetc.

What makesiLink's offerings unique is the fact that we usepre-created frameworks, designed to accelerate softwaredevelopment and implementation of business processes for ourclients. iLink has over 60 frameworks (solution accelerators),both industry-specific and horizontal, that can be easilycustomized and enhanced to meet your current businesschallenges.

Requirements

• Design and implement enterprise-scale Azure Landing Zones based on Microsoft Cloud Adoption Framework.
  
• Design Azure management group, subscription, resource group, and resource organization structures.
  
• RBAC
  
• Management Groups
  
• Naming standards
  
• Azure Blueprints/Policy-based governance where applicable
  
• Implement centralized logging, monitoring, security, and management capabilities.
  
• Design and implement hub-and-spoke or Virtual WAN-based Azure network architectures.
  
• Configure Azure Firewall, NSGs, route tables, Private Endpoints, Private DNS, and network segmentation.
  
• Implement secure connectivity between Azure and on-premises environments using:
  
• ExpressRoute
  
• Site-to-Site VPN
  
• Point-to-Site VPN where required
  
• Integrate Azure environments with enterprise Active Directory / Microsoft Entra ID.
  
• Design identity, access, privileged access, and authentication models.
  
• Establish infrastructure standards and reusable deployment patterns.
  

2. On-Premises to Azure Migration

• Assess existing on-premises infrastructure and applications for Azure migration readiness.
  
• Develop migration strategies including:
  
• Rehost
  
• Replatform
  
• Refactor
  
• Retire
  
• Retain
  
• Perform infrastructure discovery and dependency analysis.
  
• Develop migration waves and detailed migration plans.
  
• Migrate Windows and Linux servers from on-premises environments to Azure.
  
• Implement Azure Migrate for discovery, assessment, sizing, dependency mapping, and migration.
  
• Perform workload sizing and right-sizing based on performance and business requirements.
  
• Coordinate migration activities with application, database, network, security, and infrastructure teams.
  
• Execute production migrations with minimal business disruption.
  
• Perform post-migration validation, optimization, and stabilization.
  
• Troubleshoot connectivity, performance, authentication, and application issues following migration.
  
• Deploy and manage Azure infrastructure including:
  
• Managed Disks
  
• Storage Accounts
  
• Application Gateway
  
• Design highly available architectures using Availability Zones and Availability Sets.
  
• Implement infrastructure using Infrastructure as Code (IaC).
  
• Develop and maintain Terraform, Bicep, or ARM templates.
  
• Automate infrastructure deployment and configuration using Azure DevOps or GitHub Actions.
  
• Develop operational automation using PowerShell, Azure CLI, and scripting.
  
• Design and implement enterprise Azure Backup strategies.
  
• Configure and manage Recovery Services Vaults and Backup Vaults.
  
• Implement backup policies based on application criticality and business requirements.
  
• Configure VM, file, database, and workload-specific backup solutions.
  
• Implement backup retention, encryption, immutability, and recovery testing.
  
• Design and implement Azure Site Recovery (ASR) for disaster recovery.
  
• Develop DR architecture and recovery strategies for critical workloads.
  
• Define and implement:
  
• RPO – Recovery Point Objective
  
• RTO – Recovery Time Objective
  
• Perform regular disaster recovery drills and failover/failback testing.
  
• Document DR runbooks and recovery procedures.
  
• Monitor backup and replication health and proactively resolve failures.
  

5. Networking & Security

• Work with network and security teams to design secure Azure network architectures.
  
• Implement network segmentation and security controls.
  
• Configure NSGs, ASGs, UDRs, Azure Firewall, WAF, and Private Link.
  
• Troubleshoot hybrid connectivity between Azure and on-premises datacenters.
  
• Implement secure access using Microsoft Entra ID, RBAC, PIM, and managed identities.
  
• Apply security best practices to Azure infrastructure.
  
• Support Microsoft Defender for Cloud and security recommendations.
  
• Ensure Azure infrastructure meets enterprise security and compliance requirements.
  

6. Monitoring, Operations & Optimization

• Implement Azure Monitor, Log Analytics, Application Insights, and alerts.
  
• Develop operational dashboards and monitoring standards.
  
• Monitor infrastructure performance, availability, capacity, and health.
  
• Troubleshoot Azure infrastructure incidents and performance issues.
  
• Perform Azure cost optimization and resource right-sizing.
  
• Implement tagging and chargeback/showback models.
  
• Identify opportunities to reduce infrastructure and operational costs.
  
• Participate in on-call/support activities when required.
  
• Create detailed architecture diagrams and technical documentation.
  
• Develop:
  
• High-Level Designs (HLD)
  
• Low-Level Designs (LLD)
  
• Migration plans
  
• DR plans
  
• Network diagrams
  
• Operational runbooks
  
• Maintain Azure infrastructure standards and engineering documentation.
  
• Provide technical recommendations to architects and leadership.
  

Required Technical Skills

Strong hands-on experience with:

• NSG / UDR
  
• Private DNS
  
• ExpressRoute
  
• Site-to-Site VPN
  
• Load Balancer
  
• Application Gateway / WAF
  

Migration

• Migration planning and wave execution
  
• Post-migration optimization
  

Backup & DR

• Recovery Services Vault
  
• VM replication
  
• Failover/failback
  
• DR testing
  
• RPO/RTO planning
  
• Backup retention and recovery strategy
  

Automation / IaC

Experience with at least one:

• Terraform
  
• Bicep
  
• ARM Templates
  

And preferably:

• PowerShell
  
• GitHub Actions
  

Required Experience

• 7+ years of experience in infrastructure engineering, cloud engineering, or enterprise infrastructure.
  
• 4+ years of hands-on Azure experience .
  
• Proven experience designing and implementing Azure Landing Zones.
  
• Experience migrating enterprise workloads from on-premises datacenters to Azure.
  
• Strong understanding of hybrid cloud architecture.
  
• Hands-on experience implementing Azure Backup and Azure Site Recovery.
  
• Experience with enterprise networking and security.
  
• Experience working with Windows Server, Active Directory, DNS, DHCP, and enterprise infrastructure.
  
• Ability to troubleshoot complex infrastructure and networking issues.
  
• Experience working in large enterprise environments.