Azure Cloud & Infrastructure Engineer

Description

Azure and infrastructure operations

• Operate, maintain and improve Microsoft Azure infrastructure services and on-premises Windows and Linux server platforms.
• Administer Azure Virtual Machines, availability zones and sets, virtual networks, storage, load balancing and supporting platform services.
• Perform sizing, configuration, patching, upgrades, lifecycle management and decommissioning across hybrid infrastructure.
• Monitor availability, capacity, performance and platform health; take preventive action before service quality is affected.
• Plan and execute infrastructure migrations, modernisation activities and technical service improvements.

Hybrid cloud and connectivity

• Engineer and support Azure virtual networks, subnets, routing, private connectivity, network security groups and hybrid connectivity.
• Support VPN and ExpressRoute services and troubleshoot connectivity between Azure, on-premises environments and business sites.
• Maintain DNS, DHCP, name resolution and related core infrastructure services.
• Work with network and security specialists to ensure secure and resilient communication across the hybrid environment.
• Contribute to landing zones, hub-and-spoke designs and standard patterns for scalable Azure delivery.

Identity and access

• Administer Active Directory, Microsoft Entra ID, group policies and hybrid identity services.
• Maintain Microsoft Entra Connect and support identity synchronisation, authentication and access-related troubleshooting.
• Implement role-based access control, Privileged Identity Management and least-privilege administration.
• Support single sign-on, multifactor authentication, Conditional Access and access-governance requirements.
• Ensure privileged access and infrastructure changes are approved, traceable and regularly reviewed.

Security, compliance and resilience

• Apply security baselines, operating-system hardening, encryption, endpoint protection and vulnerability remediation.
• Monitor relevant security alerts, platform logs and configuration risks and support incident investigation and remediation.
• Maintain certificates and key infrastructure controls in accordance with approved standards.
• Provide audit evidence and correct identified control or compliance gaps.
• Partner with Information Security to embed security-by-design in infrastructure solutions and changes.

Backup, recovery and continuity

• Configure and maintain Azure and on-premises backup, retention and recovery services.
• Perform scheduled restore tests and document evidence that systems and data are recoverable.
• Implement and maintain disaster-recovery arrangements for critical infrastructure services.
• Maintain recovery procedures, dependencies, ownership and operational runbooks.
• Support business-continuity and disaster-recovery exercises and close identified improvement actions.

Storage, virtualisation and platform services

• Operate Azure storage services and on-premises SAN, NAS and file services.
• Monitor storage capacity, performance, growth and availability and recommend preventive improvements.
• Administer permissions, quotas and secure access to infrastructure-managed storage services.
• Support VMware, Hyper-V or comparable virtualisation platforms where used by Piab.
• Maintain physical-server firmware, storage, clustering and hardware lifecycle activities where applicable.

Monitoring, incidents and service management

• Use Azure Monitor, PRTG, system logs and other approved tools to provide proactive monitoring and actionable alerting.
• Own and resolve Azure and infrastructure incidents, service requests, problems and changes in the IT service management platform.
• Perform root-cause analysis for recurring incidents and drive corrective and preventive actions through to closure.
• Coordinate technical escalations with Microsoft, service providers and technology vendors.
• Ensure changes include risk assessment, testing, rollback planning, stakeholder communication and post-change validation.

Automation, governance and cost optimisation

• Automate repeatable infrastructure tasks using PowerShell, Bicep, Terraform, Azure automation or approved equivalent tooling.
• Improve consistency through infrastructure-as-code, standard templates, policy and configuration validation.
• Monitor Azure consumption, identify unused or underutilised resources and recommend right-sizing or scaling actions.
• Maintain tagging, ownership and governance controls that support cost transparency and lifecycle management.
• Prepare evidence-based cost, capacity and optimisation recommendations for IT Operations leadership.

Documentation and collaboration

• Maintain current architecture diagrams, inventories, configuration records, runbooks, support procedures and recovery documentation.
• Ensure operational handovers include ownership, monitoring, support model, dependencies and acceptance criteria.
• Work effectively with Service Desk, Security, network, application and business teams across countries and time zones.
• Share knowledge, support technical development across IT Operations and provide clear guidance to colleagues.
• Challenge service providers constructively and maintain clear accountability for delivery, quality and follow-up.

Requirements

Required experience and skills

• Proven hands-on experience operating Microsoft Azure and hybrid infrastructure in a business-critical environment.
• Strong practical experience with Azure Virtual Machines, networking, storage, security, monitoring, backup and recovery.
• Experience administering Windows Server and working knowledge of Linux server environments.
• Practical knowledge of Active Directory, Microsoft Entra ID, hybrid identity, RBAC, PIM, MFA and Conditional Access.
• Experience with Azure virtual networks, VPN, ExpressRoute, DNS, routing, network security groups and load balancing.
• Experience with virtualisation, enterprise storage, backup and disaster-recovery technologies.
• Ability to diagnose complex platform, performance, connectivity and authentication issues methodically.
• Experience with ITIL-aligned incident, problem, change, request and configuration-management processes.
• Clear professional English and the ability to collaborate across countries, cultures, suppliers and time zones.

Preferred qualifications

• Bachelor's degree in information technology, computer science, engineering or equivalent practical experience.
• Microsoft Azure certifications such as AZ-104, AZ-305 or AZ-700; AZ-900 is considered foundational.
• Experience with PowerShell, Bicep, Terraform, ARM templates or other infrastructure-as-code approaches.
• Experience with Azure landing zones, Azure Policy, Defender for Cloud, cost management and hybrid-cloud governance.
• Relevant VMware, Windows Server, Linux, backup, security or ITIL certifications.

Accountability and decision expectations

• Take end-to-end ownership of assigned Azure and infrastructure work, including follow-up, communication and documented closure.
• Escalate material availability, security, capacity, cost and supplier risks early, with evidence and a recommended action.
• Do not implement production changes without required approval, testing and rollback readiness.
• Balance reliability, security, performance, cost and speed using Piab standards and approved governance.

• Act as a trusted technical partner while maintaining clear global standards and documented exceptions.

Success measures

• Stable, secure and well-performing Azure and on-premises infrastructure services.
• Reduced incident recurrence and restoration time through monitoring, root-cause analysis and preventive improvement.
• Backup, restore and disaster-recovery controls are tested, documented and evidenced.
• Infrastructure patches, vulnerabilities and security findings are handled within agreed priorities.
• Azure resources are appropriately governed, tagged, right-sized and cost-transparent.
• Changes and migrations are delivered safely with complete documentation and operational handover.
• Architecture diagrams, inventories, configuration records and runbooks remain accurate and current.

Key interfaces

• Head of IT Operations and the Global IT Operations team.
• Information Security, Service Desk, Network, EUC and application teams.
• Piab business sites and technical stakeholders.
• Microsoft, managed-service providers and infrastructure technology partners.