Senior Infrastructure Support Engineer

We are looking for an experienced Senior Infrastructure Support Engineer to design, build, secure, automate, and maintain enterprise-grade cloud infrastructure on Microsoft Azure. The ideal candidate will have strong hands-on experience in Azure cloud architecture, networking, security, Infrastructure as Code (IaC), and CI/CD automation. The role involves managing production cloud environments, implementing security best practices, optimising infrastructure performance, and ensuring high availability and reliability. The candidate will work closely with development, security, and operations teams to build scalable, secure, and automated cloud environments.

Responsibilities:

• Azure Cloud Infrastructure: Design, provision, and maintain scalable and highly available Azure infrastructure, including Virtual Networks (VNets), subnets, route tables, VNet peering, Private Endpoints, and private DNS zones.
• Cloud Security and Governance: Implement and manage Microsoft Defender for Cloud, configure security baselines, monitor security posture, remediate vulnerabilities, and enforce compliance policies.
• Identity and Access Management: Design and implement Azure RBAC, custom roles, least-privilege access controls, Microsoft Entra ID, and Privileged Identity Management (PIM).
• Infrastructure Automation: Develop and maintain reusable Infrastructure as Code (IaC) modules using Terraform, Bicep, or ARM templates. Automate infrastructure provisioning and configuration using Python or Bash.
• CI/CD Pipeline Management: Build and maintain GitLab CI/CD pipelines for infrastructure provisioning, container image builds, automated deployments, and application releases.
• Kubernetes and Container Management: Deploy, manage, and secure containerised workloads using Docker and Azure Kubernetes Service (AKS), including cluster upgrades, node pool management, and container security.
• PostgreSQL Database Administration: Manage Azure Database for PostgreSQL Flexible Server, including query optimisation, indexing, connection pooling, performance tuning, high availability, and backup/recovery.
• Infrastructure Maintenance: Plan and execute infrastructure upgrades, OS patching, database version upgrades, TLS certificate rotations, and zero-downtime deployments.
• Monitoring and Reliability: Implement monitoring, logging, and alerting using Azure Monitor, Log Analytics, Prometheus, Grafana, and other observability tools.
• Incident Management: Troubleshoot critical infrastructure and networking issues, lead root-cause analysis, and implement automated solutions to prevent recurring incidents.
• Technical Documentation: Develop architecture diagrams, infrastructure standards, reusable deployment templates, and technical documentation.

Requirements:

• 5+ years of hands-on experience in Microsoft Azure cloud infrastructure and architecture.
• Strong knowledge of Azure networking, including VNets, subnets, NSGs, UDRs, VNet peering, Private Endpoints, and Private DNS.
• Practical experience with Microsoft Defender for Cloud, including CSPM, CWPP, security posture management, and threat remediation.
• Strong understanding of Azure RBAC, custom role definitions, Microsoft Entra ID, and access governance.
• Hands-on experience with Terraform, Bicep, or ARM templates for Infrastructure as Code (IaC).
• Production experience building and maintaining GitLab CI/CD pipelines.
• Strong experience administering and optimising PostgreSQL databases, preferably Azure Database for PostgreSQL Flexible Server.
• Hands-on experience with Azure Kubernetes Service (AKS), Docker, and container security.
• Proficiency in Python or Bash scripting for infrastructure automation.
• Experience managing production infrastructure upgrades, patching, monitoring, and high-availability environments.
• Strong troubleshooting, communication, and stakeholder management skills.

Good to Have:

• Experience with Azure Landing Zones and Microsoft Cloud Adoption Framework (CAF).
• Knowledge of Azure Virtual WAN, ExpressRoute, VPN, Azure Firewall, and Web Application Firewall (WAF).
• Familiarity with security and compliance frameworks such as CIS, NIST, ISO 27001, and SOC 2.
• Experience with Datadog, Splunk, Prometheus, Grafana, Azure Monitor, and KQL.
• Experience designing enterprise-scale cloud governance and network architectures.

Skills

Azure, defender, network, security