Responsibilities
* Design and implement Azure Landing Zones aligned with Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework
* Configure core platform components:
o Management groups & subscriptions
o Identity integration with Microsoft Entra ID
o Establish reusable infrastructure patterns for multiple environments (Dev, Test, UAT, Prod)
* Design and manage Azure networking components:
o Network Security Groups (NSGs)
o User Defined Routes (UDRs)
o Private Endpoints / Private Link
* Configure hybrid connectivity:
o Site-to-Site VPN
o Point-to-Site VPN
o ExpressRoute (preferred)
* 3. Security & Firewall Implementation
o Design and implement network security architecture
o Web Application Firewall (WAF) (Azure Front Door / Application Gateway)
o Define and enforce:
+ Zero Trust principles
+ Secure ingress/egress patterns
o Collaborate with Cyber Security teams to align with:
+ ISM / PSPF controls
* 4. Platform Governance & Compliance
o Implement governance controls using:
o Ensure environments comply with:
+ Security baselines
+ Audit requirements
+ Data residency and protection standards
o Contribute to platform standards, patterns, and guardrails
* 5. Automation & Infrastructure as Code
o Develop and maintain IaC using:
+ Bicep / ARM Templates
+ Terraform (preferred if multi-cloud or enterprise standard)
o Automate provisioning of:
+ Networking
+ Security configurations
o Integrate with CI/CD pipelines (Azure DevOps / GitHub)
* 6. Monitoring, Reliability & Operations
o Implement monitoring solutions:
+ Network Watcher
o Support:
+ Performance tuning
+ Capacity planning
o Contribute to DR and high availability design:
+ Failover strategies
Key Skills & Experience Technical Skills
* Strong experience with: Hybrid connectivity (VPN / ExpressRoute)
* Experience with: Infrastructure as Code (Terraform/Bicep)
Security & Compliance
* Understanding of: Zero Trust architecture
* Network security best practices
* Government or regulated environment frameworks (desirable)
DevOps & Automation
* Experience with CI/CD pipelines
* Scripting (PowerShell, CLI)
#J-18808-Ljbffr