Azure Cloud Engineer

GBIT (Global Bridge InfoTech Inc); Richardson (TX); On-site; USD 110,000 - 170,000; Full time

Job summary

GBIT (Global Bridge InfoTech Inc) in Richardson, TX seeks an experienced Azure infrastructure engineer to design and operate the Azure platform fmPilot 2.0 migrates onto. You will implement landing zones, networking, security baselines and monitoring, collaborating with DevOps to ensure reproducible environments.

Responsibilities include provisioning Azure services, securing identities with RBAC and Key Vault, and building robust monitoring, with focus on high availability and cost control

Qualifications

• Five or more years of experience designing and operating cloud infrastructure on Azure.
• Experience with Azure PaaS/IaaS offerings and networking in hybrid setups.
• Strong automation skills using PowerShell or Azure CLI; IaC with Terraform/Bicep.

Responsibilities

• Design and provision Azure services for the platform (App Service, Functions, Azure SQL, Storage).
• Connect networks: VNet, private endpoints, DNS; support hybrid connectivity.
• Establish security baseline: RBAC, Key Vault, Defender for Cloud.
• Build monitoring and alerting with Azure Monitor and Log Analytics.
• Design for high availability and disaster recovery; manage capacity and cost.
• Support workload migrations and troubleshoot platform issues across environments.

Skills

Azure platform experience

Azure networking and security

Automation with PowerShell / Azure CLI

Infrastructure as code (Terraform / Bî

Tools

Terraform

Bicep

Azure CLI

Azure Monitor / Application Insights

Job description

Builds and operates the Azure platform that fmPilot 2.0 migrates onto: Landing zone, networking, platform services, security baseline and monitoring. Partners with the DevOps engineer so every environment is reproducible through code.

Key Responsibilities

• Design and provision Azure services for the platform: App Service, Functions, Azure SQL, Storage, Service Bus, Key Vault.
• Connect networks: virtual networks, subnets, private endpoints, network security groups, DNS and hybrid connectivity, including SFTP integration over VNet.
• Establish the security baseline: managed identities, role-based access control, Azure Policy and Microsoft Defender for Cloud.
• Build monitoring and alerting with Azure Monitor, Application Insights and Log Analytics.
• Design for high availability and disaster recovery; manage capacity and cost.
• Support workload migration cutovers and troubleshoot platform issues across environments.

Required Skills and Experience

• Five or more years of experience in infrastructure or cloud engineering with substantial hands-on Azure experience.
• Deep knowledge of Azure platform-as-a-service offerings and when to use each.
• Azure networking, including private endpoints, firewalls, DNS and hybrid connectivity to on-premises systems.
• Identity-aware infrastructure: managed identities, RBAC and Key Vault integration.
• Scripting with PowerShell or Azure CLI; working knowledge of Bicep or Terraform.
• Monitoring, alerting and incident response for production cloud workloads.

Preferred Qualifications

• Azure certifications such as AZ-104 or AZ-305.
• Experience migrating .NET workloads from on-premises or IaaS to Azure PaaS.
• Cost optimization and reserved capacity planning experience.