Senior Azure Cloud Engineer: Private Networking & AKS

DVT; Pretoria; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

DVT is seeking a Senior Azure Cloud/Platform Engineer to design a greenfield, fully private Azure environment in South Africa. You will build the networking foundation, configure Private Endpoints, and deploy private AKS clusters with end-to-end hybrid DNS across site-to-site VPN.

Responsibilities include AKS private deployment, private endpoints, DNS, and security. You will codify everything with Terraform/Bicep and enable CI/CD pipelines for infra deployments.

Qualifications

• 5+ years in Cloud/Platform/Infra roles with Azure focus.
• Hands-on design/deploy of Azure VNets, NSGs, UDRs, and peering.
• Experience with AKS private clusters and Azure CNI networking.
• Terraform or Bicep IaC for multi-environment deployments.
• RBAC and Entra ID integration.
• Excellent documentation and handover skills.

Responsibilities

• Design and implement VNet topology with AKS and private endpoints.
• Deploy Private Endpoints for services (ACR, SQL, Storage, Key Vault).
• Configure Private DNS Zones, NSGs and UDRs with least-privilege access.
• Validate hybrid connectivity and DNS resolution across VPN.
• Deploy AKS private clusters and integrate with ACR and managed identities.
• Configure Application Gateway with TLS and secure ingress.
• Implement observability using Azure Monitor, App Insights and Log Analytics.
• Code infrastructure with Terraform or Bicep for multi-environment deployments.
• Establish CI/CD for infrastructure deployments (Azure DevOps).

Skills

Azure

AKS

Private Endpoints

DNS

Terraform

Bicep

Azure DevOps

RBAC

Entra ID

Networking

Education

Azure Certifications (AZ-305/AZ-104)

Tools

Terraform

Bicep

Azure DevOps

Job description

DVT is seeking a Senior Azure Cloud/Platform Engineer to design a greenfield, fully private Azure environment in South Africa. You will build the networking foundation, configure Private Endpoints, and deploy private AKS clusters with end-to-end hybrid DNS across site-to-site VPN.

Responsibilities include AKS private deployment, private endpoints, DNS, and security. You will codify everything with Terraform/Bicep and enable CI/CD pipelines for infra deployments.