Sr. Azure Infrastructure Engineer

We are seeking a highly experienced Senior Azure Infrastructure Engineer to lead and evolve our cloud platform within a regulated financial services environment. This is a hands-on, architecture-level role responsible for designing, securing, and operating a scalable, compliant Azure ecosystem supporting mission-critical workloads.
You will act as a cloud authority and technical leader, partnering with IT, Security, and Product Engineering to define Azure standards, bootstrap secure environments, and ensure operational excellence across customer-facing deployments. You will mentor engineers, influence platform strategy, and continuously improve reliability, security posture, and cost efficiency using infrastructure as code and automation-first practices. This role requires deep independence, architectural judgment, and ownership; someone comfortable making high-impact decisions, challenging assumptions, and setting long-term cloud direction.
Responsibilities:
Architect, implement, and operate enterprise-grade Azure infrastructure for mission-critical workloads.
Design and maintain high availability, disaster recovery, and business continuity architectures.
Lead Azure Landing Zone design (management groups, subscriptions, policies, identity, and networking).
Define and enforce cloud security architecture using Zero Trust principles.
Implement identity and access management with Azure Entra ID, RBAC, PIM, Conditional Access, and managed identities.
Design and manage network security controls (NSGs, Azure Firewall, WAF, Private Endpoints, VPN/ExpressRoute).
Implement data protection, encryption, and secure secret management using Key Vault and CMK.
Ensure compliance with financial and security standards (PCI DSS, SOC 2 GDPR, NIST/ISO 27001).
Drive security monitoring, incident response, and post-incident reviews using Defender for Cloud and Sentinel.
Lead Infrastructure as Code strategy using Terraform and/or Bicep/ARM.
Establish GitOps-style workflows and automation-first infrastructure deployments.
Build operational tooling and automation using PowerShell, Bash, and Python.
Ensure environment consistency across development, testing, staging, and production.
Design and optimize CI/CD pipelines with Azure DevOps, GitHub Actions, or Jenkins.
Support application teams with deployment automation, release strategies, and rollbacks.
Apply SRE practices, including SLIs, SLOs, error budgets, and capacity planning.
Design and operate container platforms using Azure Kubernetes Service (AKS).
Implement secure container pipelines with Docker, Helm, image scanning, and policy enforcement.
Architect monitoring and observability using Azure Monitor, Log Analytics, and Application Insights.
Define alerts, dashboards, and runbooks for proactive operations.
Lead FinOps initiatives, including cost modeling, budget controls, and optimization strategies.
Act as a technical leader, mentor, and escalation point for engineering teams.
Produce technical documentation, architecture diagrams, and operational runbooks.
Collaborate with Security, Compliance, and Product teams to align cloud strategy with business goals.
Influence cloud standards, best practices, and the long-term platform roadmap.
Requirements:
10+ years of overall IT experience, with 7+ years of deep, hands-on Azure experience in enterprise or regulated environments.
Proven experience designing and operating production-grade Azure architectures at scale.
Expert-level knowledge of core Azure services: Compute, Networking, Storage, Security.
Strong expertise in Infrastructure as Code (Terraform and/or Bicep/ARM).
Advanced scripting and automation skills in PowerShell, with working knowledge of Python or Bash.
Hands-on experience with AKS, Docker, and cloud-native deployment patterns.
Experience implementing identity and access management: Azure Entra ID (Azure AD), RBAC, PIM, Conditional Access, managed identities
Expertise in data protection and encryption strategies (Key Vault, CMK, disk encryption, secure secret management).
Deep understanding of cloud security architecture, governance, identity, and compliance frameworks.
Understanding of cost optimization and FinOps practices in Azure.
Strong troubleshooting skills across networking, identity, performance, and deployment failures.
Excellent communication skills for diverse audiences.
Bachelor's degree in computer science, Engineering, or equivalent practical experience.
Preferred:
Microsoft certifications such as AZ-305 AZ-500 and AZ-400
Experience supporting financial services, banking, fintech, or regulated industries.
Experience working with data engineering teams and SQL, Snowflake, and data as a service products.
Hands-on experience with Azure Sentinel, ExpressRoute, policy-as-code, and compliance automation.
Exposure to multi-cloud or hybrid cloud strategies.
Experience leading cloud migrations or greenfield Azure builds.

Skills
AKS, ARM, Azure, Bicep, Docker, Kubernetes, Terraform

Experience
10-12 yrs