Cloud Infrastructure Engineer

BlackFern Recruitment; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

BlackFern Recruitment is seeking a Senior Azure Infrastructure Engineer to lead cloud projects for clients in co-managed IT environments. You will design, deploy, and support Azure-based infrastructure while serving as an escalation point and technical mentor.

The ideal candidate has strong experience designing and supporting Azure infrastructure and enterprise networks, with a solid understanding of cloud security, identity, and modern infrastructure practices.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity, or related field.
• 5+ years in infrastructure engineering, including 3+ years owning/operating production Azure environments.
• SME-level Azure networking experience: VNets, peering, UDRs, VPN/ExpressRoute, Azure Firewall or NVAs, NSGs, Private Endpoints, and DNS.
• Solid enterprise networking fundamentals: TCP/IP, routing, DNS, firewalls, and VPN.
• Working familiarity with Microsoft Defender for Cloud and Defender for Endpoint/Servers for infrastructure remediation and collaboration with Cybersecurity teams.
• Working understanding of Zero Trust principles and their application to Azure infrastructure, networking, identity integrations, and workloads.

Responsibilities

• Serve as the primary technical resource for the Azure environment, including subscriptions, management groups, RBAC, Azure Policy, governance, tagging, and cost management.
• Design, administer, and improve core Azure services including virtual machines, storage, Key Vault, backup, disaster recovery, monitoring, and logging.
• Support disaster recovery and business continuity planning, testing, and execution.
• Manage hybrid infrastructure connecting on-premises systems with Azure and Microsoft 365, including Windows Server, Active Directory, and cloud identity services.
• Lead cloud modernization initiatives and infrastructure migrations using established cloud architecture and landing-zone best practices.
• Monitor infrastructure performance, availability, capacity, and overall health.
• Design and maintain Azure networking environments, including VNets, peering, routing, hub-and-spoke architectures, and/or virtual WAN solutions.
• Manage hybrid connectivity through VPN and/or dedicated network connections, including dynamic routing.

Skills

Azure infrastructure

Azure networking

Hybrid cloud

Infrastructure as Code

PowerShell / Azure CLI

Zero Trust / cloud security

Vendor collaboration

Defender for Cloud

Microsoft Fabric

Education

Bachelor's degree in IT / CS / Cybersecurity or related field

Tools

PowerShell

Azure CLI

Microsoft Fabric

Azure Policy

Azure DevOps

Job description

Visa sponsorship or transfers is not available.

We re looking for a Senior Azure Infrastructure Engineer to lead cloud projects for clients in co-managed IT environments. You’ll design, deploy, and support Azure-based infrastructure while serving as an escalation point and technical mentor.

Essential Duties and Responsibilities

The ideal candidate will have strong experience designing and supporting Azure infrastructure and enterprise networks, along with a solid understanding of cloud security, identity, and modern infrastructure practices.

Key Responsibilities

• Serve as the primary technical resource for the Azure environment, including subscriptions, management groups, RBAC, Azure Policy, governance, tagging, and cost management.
• Design, administer, and continuously improve core Azure services including virtual machines, storage, Key Vault, backup, disaster recovery, monitoring, and logging.
• Support disaster recovery and business continuity planning, testing, and execution.
• Manage hybrid infrastructure connecting on-premises systems with Azure and Microsoft 365, including Windows Server, Active Directory, and cloud identity services.
• Lead cloud modernization initiatives and infrastructure migrations using established cloud architecture and landing-zone best practices.
• Monitor infrastructure performance, availability, capacity, and overall health.
• Design and maintain Azure networking environments, including VNets, peering, routing, hub-and-spoke architectures, and/or virtual WAN solutions.
• Manage hybrid connectivity through VPN and/or dedicated network connections, including dynamic routing.

Qualifications

• Experience with Microsoft Fabric is required.
• Strong hands-on experience with Microsoft Azure infrastructure and enterprise networking.
• Experience supporting hybrid cloud environments and integrating on-premises infrastructure with Azure.
• Strong understanding of Azure networking, security, identity, routing, DNS, and connectivity.
• Experience with Infrastructure-as-Code and cloud automation.
• Proficiency with PowerShell and/or Azure CLI.
• Working knowledge of Microsoft security technologies and Zero Trust concepts.
• Experience working with managed service providers and third-party technology partners.

Skills and Experience:

• Bachelor s degree in Information Technology, Computer Science, Cybersecurity, or a related field,
• or equivalent experience.
• 5+ years in infrastructure engineering, including 3+ years owning or operating production Azure environments.
• SME-level Azure networking experience: VNets, peering, UDRs, VPN/ExpressRoute, Azure Firewall or NVAs, NSGs, Private Endpoints, and DNS.
• Solid enterprise networking fundamentals: TCP/IP, routing (including BGP), subnetting, DNS, firewalls, and VPN.
• Working familiarity with Microsoft Defender for Cloud and Defender for Endpoint/Servers, sufficient to support infrastructure remediation and collaborate with the Cybersecurity team.
• Working understanding of Zero Trust principles and their application to Azure infrastructure, networking, identity integrations, and workloads.