Azure Cloud Engineer
Help shape and operate a global hybrid cloud environment across Azure, infrastructure, security, networking and legacy systems.
About the role
We are looking for a hands-on Azure Cloud Engineer who enjoys working in a global hybrid environment. In this role, you will help improve, secure and operate critical cloud and infrastructure services across Azure, networking, identity, application hosting, monitoring and on-premise technologies.
You will join a technical environment where cloud and legacy systems work together, supporting both IT and OT landscapes. You will work in a business-critical environment where reliability, security and operational continuity are essential.
What you’ll do
- Manage, optimize and troubleshoot core Azure infrastructure services across compute, storage, networking, security and application delivery.
- Contribute to Azure cost optimization by reviewing resource usage, right-sizing workloads, identifying unused resources, and supporting licensing or reservation improvements.
- Investigate end-to-end hybrid connectivity issues across Azure, on-premise data centers, OT networks and vendor environments.
- Take ownership of platform services from deployment through monitoring, support, lifecycle management and continuous improvement.
- Perform structured troubleshooting, root cause analysis and follow-up improvements for operational incidents.
- Support business application platforms including Ultimo, Atlas, Tomcat, Hyperion/HFM, CXO.
- Manage internal platform services such as logging, SMTP relay, inventory, monitoring, backup, DNS, certificate management and automation tooling.
- Provide operating system-level support for Windows Server and Ubuntu Linux environments.
- Implement and support enterprise networking concepts including routing, firewall integrations, NSGs, DNS resolution and SASE migration activities.
- Maintain hybrid identity services including Entra ID, app registrations, RBAC, PIM and certificate management.
- Operate backup and disaster recovery solutions including Veeam for Azure, snapshots and cross-region DR scenarios.
- Improve observability and operational monitoring through Azure Monitor, Log Analytics, diagnostic policies, dashboards, alerting and Sentinel data ingestion.
- Strengthen platform security and secure administration practices using Defender for Cloud, CIS benchmarks, network hardening, least-privilege access, PIM, RBAC, managed identities and secure handling of secrets and certificates.
- Collaborate closely with OT, Platform, Security and external vendors such as NTT, Palo Alto and Oracle.
- Document platform designs, operational procedures and troubleshooting steps to improve consistency and reduce dependency on individual knowledge.
What you bring
Azure cloud experience
- Azure Virtual Machines, VM performance and SKU management.
- VNets, NSGs, load balancers and routing tables.
- Application Gateway and Azure Front Door.
- Storage Accounts, including Blob, File, Queue and Table storage.
- Key Vault for secrets, certificates and managed identities.
- Defender for Cloud and security baseline implementation.
- Azure Monitor and Log Analytics for monitoring and troubleshooting.
Infrastructure as Code and automation
- Working knowledge of Terraform to understand, maintain and apply existing Infrastructure as Code deployments.
- Ability to identify repetitive operational tasks and automate them using scripting, pipelines or Infrastructure as Code.
- Comfort with structured change processes, code reviews, deployment pipelines and controlled deployments for infrastructure changes.
Hybrid and legacy infrastructure knowledge
- Active Directory, including user and computer objects, group policies, group memberships, domain controller operations and upgrade scenarios.
- AD to Entra ID synchronization models, including Entra Connect, hybrid join concepts, PIM and RBAC mapping.
- DNS across on-premise and Azure environments, including split-brain DNS, Azure Private DNS, forwarding and internal name resolution issues.
- Certificate Authorities and PKI, including domain controller certificates, code-signing certificates and client/server SSL.
- Legacy server systems such as print servers, SMTP relay servers and file servers using SMB or NFS.
- Backup and disaster recovery systems, including Veeam Backup for Azure and hybrid backup designs with private endpoints.
Nice to have
- Experience with OT or industrial environments, including industrial network segmentation, monitoring platforms, OT firewalls or plant-floor integrations.
- Advanced Terraform experience, including module design, reusable patterns and automated cloud deployments.
- Python scripting experience for automation or operational tooling.
Who you are
- You enjoy working across both modern cloud platforms and traditional infrastructure.
- You are a strong problem solver who can investigate complex technical issues from application to network layer.
- You are comfortable working independently while keeping stakeholders informed.
- You communicate effectively with Security, OT, Platform teams and external vendors.
- You are motivated by improving infrastructure, automation, stability and security — not just maintaining what already exists.