Senior Azure Cloud Engineer

AES Global; Johannesburg; Hybrid; ZAR 900,000 - 1,300,000; Full time

Job summary

AES Global is seeking a Senior Azure Cloud Engineer to join its cloud engineering team, delivering for enterprise clients. You’ll design, implement and support Azure environments across infrastructure, security, networking and platform services, and partner with development teams on workload modernisation and migrations.

Hybrid in Johannesburg — three days a week in the office. The role emphasizes landing zones, hub-and-spoke networks, governance, IAM and secret management, and IaC with

Qualifications

• 5+ years in cloud, infrastructure or platform engineering.
• Hands-on Azure experience: networking, IAM, security, landing zones, governance.
• Experience with hub-and-spoke architectures and IaC (Terraform, Bicep).

Responsibilities

• Design, implement and support Azure environments and landing zones.
• Build hub-and-spoke network architectures (VNets, NSGs, routes, VPN/ExpressRoute, DNS).
• Apply governance with Azure Policy, RBAC, management groups, locks and tagging.
• Manage Azure IAM and Key Vault secrets.
• Support migrations and modernisation with CI/CD and DevOps practices.

Skills

Azure

Networking

Security

IAM

Governance

IaC

Terraform

Bicep

DevOps

Migrations

Monitoring

Tools

Terraform

Bicep

Azure DevOps

Job description

We’re working with an established technology consultancy, and they’re looking for a Senior Azure Cloud Engineer to join its cloud engineering team, delivering for enterprise clients.

You’ll work across Azure infrastructure, security, networking and platform services, and partner with development teams on workload modernisation, migrations, resiliency and scalability. It suits an engineer with strong Azure foundations who can help build secure, well-governed cloud environments.

What you’ll do

• Design, implement and support Azure environments and landing zones aligned to best practice
• Build hub-and-spoke network architectures — VNets, NSGs, route tables, VPN/ExpressRoute, service endpoints and DNS
• Apply governance with management groups, Azure Policy, RBAC, resource locks and tagging standards
• Manage Azure IAM and Microsoft Entra ID, least-privilege access (RBAC, PIM) and secrets in Key Vault
• Work across Azure compute and data services (VMs, App Services, AKS, Functions, Storage, Azure SQL, Cosmos DB, Monitor/Log Analytics, Backup and Site Recovery)
• Support migrations and modernisation with CI/CD, Infrastructure as Code and DevOps practices

What you’ll bring

• 5+ years in cloud, infrastructure or platform engineering
• Strong hands‑on Microsoft Azure experience — networking, IAM and security, landing zones, governance and resource organisation
• Experience implementing or supporting hub‑and‑spoke architectures
• Infrastructure as Code (Terraform, Bicep)
• A good understanding of application architectures (monoliths, microservices, event-driven, APIs) and software‑engineering fundamentals

Working model

Hybrid in Johannesburg — three days a week in the office.