Azure Cloud Engineer

Azure Cloud Engineer

Primary Skill Requirement:

Azure Cloud Engineering

Secondary Skill Requirement:

Horizon VDI/NSX

We are looking for an Azure Cloud Engineer with strong hands-on experience in designing, deploying, and operating Microsoft Azure infrastructure. The role will also support VMware Horizon VDI environments and VMware NSX networking/security capabilities as secondary skills to enable hybrid operations and virtual desktop services. The engineer will be responsible for BAU operations, automation, troubleshooting, security compliance, and continuous improvement.

Key Responsibilities (Primary Azure Cloud Engineering)

Azure Infrastructure Build & Operations

• Provision and manage Azure services including Virtual Machines, VNets, Subnets, NSGs, Load Balancers, Azure Firewall, Storage Accounts, Key Vault, Azure Backup, Azure Site Recovery, and Azure Monitor.
• Perform incident management, troubleshooting, and root cause analysis for Azure infrastructure and platform-related issues.
• Handle change management, patching coordination, upgrade activities, and environment standardization.

Cloud Governance, Security & Compliance

• Implement and manage RBAC, Azure Policy, tagging strategy, resource locks, and subscription governance.
• Support security controls aligned with enterprise requirements: identity/access controls, encryption, logging, vulnerability remediation, secure configurations.
• Assist with audits by maintaining evidence, compliance reports, and operational runbooks.

Automation & Infrastructure as Code (IaC)

• Automate provisioning and operational tasks using: Terraform / Bicep / ARM templates, Azure DevOps (Pipelines), Git, PowerShell / Azure CLI.
• Build self-service deployment patterns and standard reusable modules for improved reliability and speed.

Monitoring & Reliability Engineering

• Configure and manage monitoring/alerting via Azure Monitor, Log Analytics, Application Insights, and integrate with ITSM tools as needed.
• Maintain and optimize SLAs by proactive monitoring, capacity planning, and performance tuning.

Key Responsibilities (Secondary Horizon VDI / VMware NSX)

Horizon VDI Support

• Support VMware Horizon components such as Connection Server, Unified Access Gateway (UAG), vCenter integration, pools, golden images, and session troubleshooting.
• Handle VDI incidents related to user access, performance, display protocol issues, profile issues, and application publishing.
• Assist in operational activities such as image updates, agent upgrades, pool maintenance, and capacity monitoring.

NSX Networking & Security Support

• Support NSX constructs like segments, distributed firewall rules, security groups, NAT, load balancing (if applicable), micro-segmentation, and service chaining basics.
• Work with network/security teams to troubleshoot east-west traffic, routing, firewall policies, and connectivity issues impacting workloads and VDI.

Required Skills (Must-Have)

Azure (Primary)

• Strong experience with Azure core services: Compute, Networking, Storage, Identity, Monitoring.
• Solid troubleshooting capability across: VM performance, network routing, DNS, firewall/NSG rules, storage issues.
• Experience with Azure Monitor/Log Analytics and alert tuning.
• Understanding of IAM concepts: Azure AD, RBAC, Conditional Access (basic understanding).

Automation / Scripting

• Hands-on scripting skills: PowerShell (preferred) and/or Python.
• Working knowledge of IaC: Terraform or Bicep/ARM.
• Experience with Git and CI/CD fundamentals (Azure DevOps preferred).

IT Operations

• ITIL-aligned experience with Incident, Problem, Change processes.
• Ability to work in 24x7 support / on-call environments (if required).

Good-to-Have Skills (Preferred)

• Azure services exposure: AKS, Azure Arc, Azure Files, Private Endpoints, WAF, Bastion.
• Security tooling exposure: Microsoft Defender for Cloud, Sentinel.
• VMware stack knowledge: vSphere, vCenter, basic ESXi troubleshooting.
• Horizon add-ons: DEM/FSLogix, App Volumes, profile management.
• NSX advanced: Edge routing, BGP, VRF, advanced load balancing.
• Experience integrating monitoring/alerts with ServiceNow (or equivalent ITSM).

Qualifications & Experience

• 8 10+ years overall infrastructure experience with 4+ years focused on Azure engineering/operations (adjustable by level).
• Bachelor's degree in Engineering/Computer Science or equivalent experience.

Certifications (Preferred)

• Microsoft Certified: Azure Administrator Associate (AZ-104) preferred.
• Azure Solutions Architect (AZ-305) added advantage.
• VMware Horizon / NSX certifications good to have.

Behavioral / Soft Skills

• Strong stakeholder communication and ability to explain technical issues clearly.
• Ownership mindset, problem-solving orientation, and ability to drive closure.
• Good documentation habits: SOPs, runbooks, and operational checklists.