Azure cloud Infrastructure Engineer

Objective: Provision and operate GCC Azure landing zone and IaaS infrastructure to host, meeting GCC 2.0 compartmentalisation and security requirements.

Key Responsibilities

• Design and deploy Azure Virtual Machines (VMs) for enterprise workloads, sized based on

• on-prem baseline and performance constraints.

• Design Azure Virtual Network (VNet) topology with Internet/Intranet segmentation implement VNet peering and hybrid connectivity (ExpressRoute/VPN Gateway) as required.

• Configure Azure Load Balancers / Application Gateways, health probes, and HA patterns to replace/replicate on-prem VIP/cluster behaviours.

• Implement Azure Firewall and Network Security Groups (NSGs) aligned to GCC compartmentalisation and security frameworks.

• Set up monitoring and log management (Azure Monitor, Log Analytics) and integrate with existing observability where required.

• Implement governance controls: RBAC, resource locks, and policy guardrails per agency governance.

• Define and validate backup/restore approach for VMs and data (where applicable), and support DR readiness planning.

• Provide ongoing infrastructure support during migration, cutover, and BAU.

Required Skills / Experience

• Extensive experience (5-8 years) as a Azure cloud Infrastructure Engineer

• Azure VM provisioning, storage/disk layout, and performance troubleshooting.

• VNet design, network segmentation, NSGs, Azure Firewall, and load balancing/App Gateway.

• Hybrid connectivity (ExpressRoute/VPN Gateway), DNS considerations, and SSL/TLS certificate handling.

• Azure Monitor/Log Analytics and alerting familiarity with regulated/government environments.

• Scripting/automation using PowerShell and Azure CLI.