About the role
Builds and operates the Azure platform that fmPilot 2.0 migrates
onto: Landing zone, networking, platform services, security baseline and
monitoring. Partners with the DevOps engineer so every environment is
reproducible through code.
Key Responsibilities
‒Own networking: Virtual networks, subnets, private endpoints, network security groups, DNS and hybrid connectivity, including SFTP integration over VNet.
‒Establish the security baseline: managed identities, role-based access control, Azure Policy and Microsoft Defender for Cloud.
‒Build monitoring and alerting with Azure Monitor, Application Insights and Log Analytics.
‒Design for high availability and disaster recovery; manage capacity and cost.
‒Support workload migration cutovers and troubleshoot platform issues across environments.
Required Skills and
Experience
‒Deep knowledge of Azure platform-as-a-service offerings and when to use each.
‒Azure networking, including private endpoints, firewalls, DNS and hybrid connectivity to on-premises systems.
‒Identity-aware infrastructure: managed identities, RBAC and Key Vault integration.
‒Scripting with PowerShell or Azure CLI; working knowledge of Bicep or Terraform.
‒Monitoring, alerting and incident response for production cloud workloads.
Preferred Qualifications
‒Experience migrating .NET workloads from on-premises or IaaS to Azure PaaS.
‒Cost optimization and reserved capacity planning experience.