Azure Cloud Infra Engineer - Secure Hybrid Networking

Concord Finance; Ciudad de México; Hybrid; MXN 600,000 - 900,000; Full time

Benefits offered by this job

Grocery Vouchers

Internet Bonus

Medical Insurance

Life Insurance

Dental Insurance

Law Benefits

Job summary

Concord Finance seeks a Cloud Infrastructure Engineer to own and operate our Azure environments. You will translate designs into secure, documented infrastructure and partner with the DevOps team to uphold a mature, compliant hybrid setup.

Ideal candidates bring 5+ years in IT infrastructure with hands-on Azure experience and strong networking skills, plus SOC 2 and PCI-DSS familiarity. Expect documented runbooks and a focus on changes and security posture.

Qualifications

• 5+ years in IT infrastructure with at least 3 years of hands-on Azure implementation and operations experience.
• Strong Azure networking: VNets, NSGs, Azure Firewall, ExpressRoute, VPN Gateway, Private Link/Endpoints, DNS, load balancing.
• Experience in regulated financial services environments (banking, insurance, fintech, or similar).
• Knowledge of Azure Active Directory / Entra ID, RBAC, and identity and access management.
• Demonstrated experience with SOC 2 and PCI‑DSS compliance in cloud environments.
• Active Microsoft Certified: Azure Administrator Associate and Azure Network Engineer Associate.
• Ability to work from architectural designs, standards documents, and runbooks.
• Strong documentation habits and attention to change management processes.

Responsibilities

• Maintain and operate Azure infrastructure in line with architectural designs and standards.
• Manage Azure resources (VMs, storage, App Services) and related compute and platform services.
• Perform workload assessments in acquired environments and document gaps versus standards.
• Execute remediation and consolidation following approved change management procedures.
• Own day-to-day configuration and maintenance of Azure networking (VNets, NSGs, Firewall, ExpressRoute, VPN)
• Implement hub-and-spoke and other network topologies across environments.
• Troubleshoot complex network connectivity across hybrid and multi-environment Azure infrastructure.
• Support network integration projects as environments are rationalized and connected to the enterprise network.
• Maintain and enforce Azure security controls aligned with SOC 2 and PCI-DSS.

Skills

Azure

Networking

SOC 2

PCI-DSS

Entra ID

RBAC

Tools

Microsoft Defender for Cloud

Azure Monitor

ExpressRoute

Private Endpoints

DNS

Job description

Concord sits at the center of the credit market ecosystem. We provide loan servicing, backup servicing, and capital markets administration for specialty finance lenders, institutional investors, and asset managers. Our clients include originators across fintech, solar, home improvement, equipment finance, and other specialty asset classes. When a lender needs a trusted partner to service their portfolio or a trustee needs real-time reporting, they call Concord.

We are looking for a skilled Cloud Infrastructure Engineer to join our Infrastructure organization and serve as the primary hands-on owner of our Azure environments. This role works in close partnership with our Cloud Infrastructure Architect, translating architectural designs and standards into reliable, secure, and well-documented infrastructure.

Our Azure footprint has grown significantly through recent acquisitions, and this role will be central to the ongoing operation, maintenance, and security hardening of those environments. You will bring deep Azure expertise and a strong cloud networking background, working alongside our DevOps team to ensure our hybrid environment is consistent, compliant, and well-managed.

This is a technical execution role for someone who takes pride in maintaining things the right way, following defined standards, and contributing to a mature, process-driven infrastructure organization.

Responsibilities

• Maintain and operate Azure infrastructure in accordance with architectural designs and standards defined by the Cloud Infrastructure Architect
• Manage and support Azure resources, including virtual machines, storage accounts, App Services, and related compute and platform services
• Execute workload assessments on acquired Azure environments, documenting the current state and identifying gaps against enterprise standards
• Carry out remediation and consolidation work as directed, following approved change management procedures
• Own the day-to-day configuration and maintenance of Azure networking components, including VNets, subnets, NSGs, Azure Firewall, ExpressRoute, VPN Gateways, Private Endpoints, and DNS
• Implement and maintain hub-and-spoke and other network topologies across acquired and native Azure environments
• Troubleshoot complex network connectivity issues across hybrid and multi-environment Azure infrastructure
• Support network integration projects as acquired Azure environments are rationalized and connected to the broader enterprise network
• Maintain and enforce Azure security controls in alignment with SOC 2 and PCI-DSS compliance requirements
• Manage Azure Active Directory / Entra ID configurations and RBAC policies; partner with the InfoSec team on conditional access and identity governance
• Support vulnerability remediation and security posture improvement using tools such as Microsoft Defender for Cloud or equivalent
• Ensure infrastructure changes are documented and auditable in accordance with change management policies
• Work from architectural blueprints, runbooks, and procedures authored by the Cloud Infrastructure Architect and VP of Infrastructure
• Document configurations, network diagrams, and operational procedures to maintain an accurate and current infrastructure knowledge base
• Collaborate with the T2 Systems Administration team on escalated issues and cross-functional infrastructure projects
• Participate in on-call rotation for critical Azure infrastructure incidents

• 5+ years of experience in IT infrastructure, with at least 3 years of hands-on Azure implementation and operations experience
• Strong Azure networking expertise: VNets, NSGs, Azure Firewall, ExpressRoute, VPN Gateway, Private Link/Endpoints, DNS, and load balancing
• Experience working in regulated financial services environments (banking, insurance, fintech, or similar)
• Working knowledge of Azure Active Directory / Entra ID, RBAC, and identity and access management
• Demonstrated experience with SOC 2 and PCI-DSS compliance in a cloud environment
• Active Microsoft Certified: Azure Administrator Associate certification
• Active Microsoft Certified: Azure Network Engineer Associate certification
• Ability to work from architectural designs, standards documents, and technical runbooks
• Strong documentation habits and attention to detail in change management processes

Preferred Qualifications

• Experience assessing and remediating cloud environments inherited through mergers or acquisitions
• Familiarity with Azure Monitor, Log Analytics, and observability tooling
• Exposure to AWS networking concepts (helpful for cross-team collaboration with our DevOps team)
• Microsoft Certified: Azure Solutions Architect Expert

• Grocery Vouchers
• Internet Bonus
• Medical Insurance
• Life Insurance
• Dental Insurance
• Law Benefits