Senior Azure Cloud Engineer: Private Networking & AKS

DVT; Johannesburg; On-site; ZAR 1,000,000 - 1,500,000; Full time

Job summary

DVT is seeking a Senior Azure Cloud/Platform Engineer to design a fully private Azure environment for a greenfield build in South Africa. You will establish the Azure networking foundation, private AKS clusters, and end-to-end DNS across a site-to-site VPN, with infrastructure codified for Production and Test environments.

The role requires hands-on experience with Azure Private Endpoints, Private DNS Zones, and hybrid connectivity, plus building scalable CI/CD pipelines and observability using

Qualifications

• 5+ years in Cloud/Platform/Infra roles with Azure focus.
• Hands-on design and deployment of Azure VNets, subnets, NSGs, UDRs, and peering.
• Experience with AKS private clusters, Azure CNI, and workload identity.
• Proficiency with Terraform or Bicep for IaC and multi-environment deployments.
• Experience with Azure Monitor, Container Insights, and Log Analytics.

Responsibilities

• Design and implement Azure private networking topology for AKS and services.
• Deploy and configure private endpoints for key Azure services.
• Configure Private DNS Zones and NSGs/UDRs for least-privilege access.
• Enable end-to-end hybrid DNS resolution across site-to-site VPN.
• Deploy AKS private clusters with private API server endpoints and autoscaling.
• Configure Application Gateway and Ingress for AKS with TLS from Key Vault.
• Establish observability via Azure Monitor, Log Analytics, and Application Insights.
• Implement IaC with Terraform or Bicep and CI/CD for deployments.

Skills

Azure networking

AKS

Terraform/Bicep

Hybrid connectivity

Private Endpoints

DNS Zones

RBAC

CI/CD pipelines

Azure Monitor

Tools

Terraform

Bicep

Kubernetes

Azure DevOps

Job description

DVT is seeking a Senior Azure Cloud/Platform Engineer to design a fully private Azure environment for a greenfield build in South Africa. You will establish the Azure networking foundation, private AKS clusters, and end-to-end DNS across a site-to-site VPN, with infrastructure codified for Production and Test environments.

The role requires hands-on experience with Azure Private Endpoints, Private DNS Zones, and hybrid connectivity, plus building scalable CI/CD pipelines and observability using