Job
Description
JD: Azure Cloud Engineer Level 2
Role Overview We are seeking an Azure Cloud Engineer (Level 2) to handle advanced operations, RBAC troubleshooting, and implementation of Azure IaaS, PaaS, networking, and security services, Key Responsibilities Provision, decommission, and manage Azure Virtual Machines (Windows/Linux), Perform OS patching, vulnerability remediation, resizing, backup, and restore of VMs, Troubleshoot VM connectivity and performance issues (RDP/SSH, NIC, disk, CPU/memory), Implement and troubleshoot Azure Load Balancer, Application Gateway, and Azure Front Door including SKU upgrades and certificate renewals, Configure and troubleshoot Azure Web Apps and Function Apps including VNet Integration, Private Endpoints, and Event-driven architecture (Event Grid, Service Bus, Storage Queues), Design and manage VNet peering, Site-to-Site VPNs, NSGs, UDRs, Private Endpoints, and Firewall rules (including IOC blacklisting), Configure and analyze NSG flow logs, VNet flow logs for connectivity issues, Implement and manage monitoring solutions: Azure Monitor, Log Analytics, Application Insights, and KQL queries for root cause analysis, Manage Key Vault (secrets, certificates, keys), RBAC Management: Assign roles (built-in/custom) to users, groups, and service principals, Enforce principle of least privilege, Troubleshoot access issues and resolve IAM-related incidents, Provide L2 support for incident, problem, and change management, Collaborate with L1 team for escalations and knowledge transfer, Core Technical Skills Azure Compute Hands-on experience with VM deployment, configuration, and scaling, Knowledge of VM availability sets, availability zones, and scale sets, Experience with disaster recovery and backup solutions, Azure Networking Strong understanding of Virtual Networks (VNets), subnets, and peering, Expertise in Network Security Groups (NSG): rule creation, priority, and troubleshooting, Experience with Azure Firewall rules, policies, and logging, Knowledge of Route Tables (UDR), default routes, and forced tunneling, Ability to troubleshoot network connectivity issues using tools like Network Watcher, Connection Monitor, IP Flow Verify, and Flow Logs, Azure App Service Experience deploying and managing Web Apps, API Apps, and App Service Plans, Integration with private endpoints, VNet integration, and hybrid connections, Scaling (manual, autoscale) and performance troubleshooting, Azure Function Apps Development and deployment of serverless functions, Knowledge of consumption vs premium vs dedicated plans, Integration with event-driven architecture (Event Grid, Service Bus, Storage Queues, etc,), Monitoring and troubleshooting function execution, Azure Monitoring Proficiency with Azure Monitor, Log Analytics, and Application Insights, Creating and managing alerts, metrics, dashboards, Experience with Kusto Query Language (KQL) for log analysis, Understanding of diagnostic settings and data retention, Azure Role-Based Access Control (RBAC) Hands-on experience with IAM, role assignments, and custom roles, Knowledge of least privilege principle and troubleshooting access issues, Integration with Azure AD groups and service principals, Additional Preferred Skills Knowledge of Terraform/ARM for IaC (Infrastructure as Code), Understanding of Azure security best practices, Basic knowledge of cost optimization in Azure, Skills & Qualifications 36 years of IT experience with at least 23 years in Azure administration, Strong hands-on experience in Azure Compute, Networking, PaaS, and RBAC troubleshooting, Solid understanding of Azure Firewall, NSGs, UDRs, VPNs, and Private Endpoints, Working knowledge of Azure Monitor, Log Analytics, Application Insights, and KQL, Experience managing IAM, RBAC, role assignments, and custom roles, Microsoft certification (AZ-104, AZ-700, or AZ-305) preferred,
