Senior Azure Engineer – Cloud Infrastructure, APIM & Security

Latent Bridge Pvt Ltd; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

LatentBridge Pvt Ltd is seeking an experienced Senior Azure Engineer to build, harden, automate, and operate Azure cloud infrastructure for MCP connectivity and Foundry model access. The role focuses on APIM, security, and scalable, compliant cloud foundations across two 11–12 week phases.

The candidate will implement IaC with Terraform/Bicep, integrate Entra ID, manage secrets in Key Vault, and establish robust monitoring, governance, and CI/CD pipelines for production readiness.

Qualifications

• 7–10+ years of experience as an Azure Cloud Engineer, Platform Engineer, or DevOps / SRE.
• Strong hands-on experience configuring Azure API Management (APIM) and gateway routing.
• Deep knowledge of Microsoft Entra ID (Azure AD) and Key Vault integration.
• Hands-on experience with VNet peering, Private Endpoints, Private Link, DNS, and Application Gateways.
• Proficiency with Terraform or Bicep, and Azure DevOps pipelines or GitHub Actions.
• Hands-on expertise with Azure Monitor, Application Insights, and Log Analytics.

Responsibilities

• Configure Azure APIM, gateway policies, routing, authentication, and RBAC.
• Implement secure networking and Entra ID integration with managed identities and Key Vault.
• Build reusable IaC (Terraform/Bicep) and multi-stage CI/CD pipelines for zero-downtime releases.
• Configure monitoring dashboards, logs, and telemetry for operational health.
• Plan and test high availability and disaster recovery, including failover under load.
• Support Microsoft Foundry deployments and production handover to platform teams.

Skills

Azure APIM

Entra ID / Azure AD

RBAC / IAM

Terraform / Bicep

CI/CD pipelines

Azure Monitor / Diagnostics

Networking (VNet, Private Endpoints)

Zero-trust / security

Foundry / AI infra exposure

Tools

Terraform

Bicep

Azure DevOps

GitHub Actions

Azure APIM

Job description

At LatentBridge, we make digital transformation work—without the noise.

We help enterprises simplify the complex, using AI orchestration and intelligent automation to solve real operational challenges. Our focus is on the parts of the business that are often overlooked—compliance, audit, policy, and risk—where precision, scalability, and accountability matter most.

Our products—Epic AI and IntellixCore—are built for this depth.Epic AI delivers enterprise-grade search and knowledge assistance directly inside the tools people already use—making access to information instant and intuitive.

IntellixCore is a platform to build, deploy, and scale intelligent agents across critical workflows—seamlessly integrating with existing systems.

We work with global banks, financial institutions, and legal firms—teams navigating constant change, regulatory pressure, and operational complexity.

In 2024, we were named one of the Deloitte UK Technology Fast 50, recognised for our growth and the tangible impact we deliver.

What sets us apart is not just what we build, but how we build it—grounded in enterprise realities, delivered with clarity, and always focused on outcomes that matter.

Job Description

This is a remote position.

About the Role

We are looking for an experienced Senior Azure Engineer to build, harden, automate, and operate the Azure cloud infrastructure supporting enterprise Model Context Protocol (MCP) connectivity, gateway policies, and Microsoft Foundry model access.

The ideal candidate will have extensive hands-on experience in Azure API Management (APIM), networking, Microsoft Entra ID security, Infrastructure as Code (Terraform/Bicep), and production operations, ensuring resilient, observable, and compliant cloud foundations across both phases of the programme.

Programme Context & Phased Effort Allocation

The engagement is structured as a 22-week sequential programme divided into two delivery phases, assuming a five-day working week:

• Phase 1: MCP Gateway and Governance (Weeks 1–10 / 10 Weeks): Full-time allocation (1.0 FTE) configuring Azure APIM, gateway routing policies, private networking, secrets management, and automated CI/CD pipelines.
  
• Phase 2: Model Access through Microsoft Foundry (Weeks 11–22 / 12 Weeks): Full-time allocation (1.0 FTE) supporting Microsoft Foundry deployments, model endpoint connectivity, failover testing, and production handover.
  

Key Responsibilities

• APIM Gateway Configuration: Configure Azure APIM, gateway policies, routing, authentication, mutual TLS, and role-based access controls.
  
• Networking & Security Integration: Implement secure networking (VNets, Private Endpoints, NSGs), Microsoft Entra ID integration, managed identities, secrets management (Azure Key Vault), and environment configuration.
  
• Infrastructure as Code & CI/CD: Build reusable Infrastructure as Code (Terraform or Bicep) and multi-stage CI/CD pipelines for automated, repeatable deployment.
  
• Monitoring & Telemetry: Configure Azure Monitor, Log Analytics, diagnostic logs, metric alerts, and operational health dashboards.
  
• High Availability & Disaster Recovery: Implement high availability and disaster recovery arrangements, and test deployment, capacity, and failover under load.
  
• Microsoft Foundry & Operational Release: Support Microsoft Foundry deployments, model endpoint connectivity, production release validation, and operational handover to platform teams.
  

Required Skills & Experience

• 7–10+ years of experience as an Azure Cloud Engineer, Platform Engineer, or DevOps / Site Reliability Engineer.
  
• Azure APIM Expertise: Strong hands-on experience configuring Azure API Management (APIM), XML policy definitions, rate-limiting, authentication delegation, and gateway routing.
  
• Identity & Access Management: Deep knowledge of Microsoft Entra ID (Azure AD), managed identities, RBAC, service principals, and Key Vault integration.
  
• Azure Networking: Hands-on experience with VNet peering, Private Endpoints, Private Link, DNS, and Application Gateways.
  
• Infrastructure as Code (IaC) & CI/CD: Proficiency with Terraform or Bicep, alongside Azure DevOps pipelines or GitHub Actions for automated zero-downtime releases.
  
• Monitoring & Diagnostics: Hands-on expertise with Azure Monitor, Application Insights, Log Analytics (KQL queries), and alert automation.
  

Preferred Qualifications

• Regulated Financial Services Experience: Familiarity with financial services compliance, data residency, private cloud perimeter controls, and audit trails.
  
• AI Infrastructure Exposure: Experience provisioning infrastructure for AI/ML workloads, Azure OpenAI Service, or Microsoft Foundry endpoints.
  
• Container & Container Apps: Experience with Azure Container Apps (ACA), AKS, or Docker-based microservices deployments.
  
• Infrastructure as Code (Terraform / Bicep)
  
• Microsoft Entra ID & Zero-Trust Cloud Security
  
• Telemetry, Logging & Diagnostic Dashboards (KQL)
  
• High Availability & Disaster Recovery Drills
  
• Operational Handover & Production Support
  

Requirements

Required Skills & Experience

• 7–10+ years of experience as an Azure Cloud Engineer, Platform Engineer, or DevOps / Site Reliability Engineer.
  
• Azure APIM Expertise: Strong hands-on experience configuring Azure API Management (APIM), XML policy definitions, rate-limiting, authentication delegation, and gateway routing.
  
• Identity & Access Management: Deep knowledge of Microsoft Entra ID (Azure AD), managed identities, RBAC, service principals, and Key Vault integration.
  
• Azure Networking: Hands-on experience with VNet peering, Private Endpoints, Private Link, DNS, and Application Gateways.
  
• Infrastructure as Code (IaC) & CI/CD: Proficiency with Terraform or Bicep, alongside Azure DevOps pipelines or GitHub Actions for automated zero-downtime releases.
  
• Monitoring & Diagnostics: Hands-on expertise with Azure Monitor, Application Insights, Log Analytics (KQL queries), and alert automation.
  
• Infrastructure as Code (Terraform / Bicep)
  
• Microsoft Entra ID & Zero-Trust Cloud Security
  
• Telemetry, Logging & Diagnostic Dashboards (KQL)
  
• High Availability & Disaster Recovery Drills
  
• Operational Handover & Production Support