Azure Cloud Platform Engineer

Azure Cloud Platform Engineer

Area(s) of responsibility

Azure Cloud Platform & Migration

• Support and execute Azure cloud migration initiatives (re‑host, re‑platform, limited re‑architect).
• Assess existing infrastructure and applications and map them to Azure‑native services.
• Assist in migration planning, execution, validation, and post‑migration optimization.
• Troubleshoot migration issues related to networking, identity, and platform services.

Azure Landing Zone Setup

• Implement and manage Azure Landing Zones aligned with Microsoft Cloud Adoption Framework (CAF).
• Deploy and manage:
• Management Groups and Subscriptions
• Resource organization, naming standards, and tagging
• Core shared services
• Configure hub‑and‑spoke or vWAN architectures.
• Enforce governance using Azure Policy, RBAC, and management group hierarchy.

Azure Infrastructure & Platform Services

• Provision and manage Azure services including:
• Virtual Networks, Subnets, NSGs, UDRs
• Virtual Machines and PaaS services
• Storage Accounts, Key Vault
• Support platform services required for migrated workloads.
• Ensure high availability, scalability, and resilience of the Azure platform.

Automation & Infrastructure as Code

• Deploy Azure infrastructure using Infrastructure as Code (IaC):
• ARM templates
• Bicep (preferred)
• Terraform (nice to have)
• Integrate IaC with CI/CD pipelines using Azure DevOps or GitHub Actions.
• Promote standardization, reusability, and automation across environments.

Security, Governance & Operations

• Implement security best practices:
• Least‑privilege RBAC
• Secure networking and private endpoints
• Key Vault integration for secrets
• Support monitoring and logging using Azure Monitor and Log Analytics.
• Assist with operational activities including incident troubleshooting and platform optimization.