• Maintain, refactor, and scale hardened Azure Landing Zones ensuring explicit logical segregation between control planes and data planes. • Govern infrastructure code quality by owning and leading comprehensive Terraform Pull Request (PR) reviews. • Implement zero-trust network perimeter controls, completely removing public service exposure. • Eliminate the use of static secrets and keys by establishing identity-driven authentication layers across all environments. • Collaborate with core technical stakeholders, including the CTO and Geo Practice Lead, to deliver secure infrastructure blueprints.

Role Description This role is an opportunity to shape secure cloud infrastructure patterns in a high-impact consulting environment. As a Senior Cloud Infrastructure Engineer - Azure, you will help define and strengthen the architectural foundations that support complex client environments, partnering closely with technical leadership and contributing to infrastructure decisions that emphasize security, resilience, and long-term maintainability. Responsibilities - Maintain, refactor, and scale hardened Azure Landing Zones ensuring explicit logical segregation between control planes and data planes. - Govern infrastructure code quality by owning and leading comprehensive Terraform Pull Request (PR) reviews. - Implement zero-trust network perimeter controls, completely removing public service exposure. - Eliminate the use of static secrets and keys by establishing identity-driven authentication layers across all environments. - Collaborate with core technical stakeholders, including the CTO and Geo Practice Lead, to deliver secure infrastructure blueprints. Qualifications - Expert-level mastery of infrastructure decoupling strategies (separating data processing workloads from management states). - Strong operational discipline in agile environments: active participation in sprint execution, backlog hygiene, and structured technical documentation. Specific Tools & Technologies - Infrastructure as Code: Advanced Terraform exclusively (expertise in state management, state recovery, complex nesting, and reusable enterprise module design). - Identity & Cryptography: Microsoft Entra ID, Azure Key Vault (strictly leveraging Azure RBAC authorization models), OpenID Connect (OIDC) federated credentials. - Networking & Boundaries: Azure Private Link, Private Endpoints, Split-Horizon Private DNS Zone linking, and backend subnet isolation routing. - CI/CD Orchestration: Secure GitHub Actions workflow engineering utilizing passwordless authentication identities. - Workloads: Private network infrastructure hosting for analytical data environments (such as network-isolated Azure Databricks configurations) and secure model ingestion layers. Certifications - Required: Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Required: HashiCorp Certified: Terraform Associate or Advanced - Preferred: Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Microsoft Certified: Cloud and AI Security Engineer Associate certification (SC-500) Preferred Skills - Familiarity with financial or insurance sector compliance frameworks and MEC reference architecture patterns. - Practical alignment with cloud economics and fundamental infrastructure sizing optimizations.

• Create realistic cloud and platform engineering challenges. • Build reproducible, containerized infrastructure environments. • Design scenarios covering networking, IAM, queues, storage, scaling, and reliability. • Define measurable requirements for configuration, topology, and runtime behaviour. • Develop automated integration, load, security, failure, deployment, and recovery tests. • Create accurate reference solutions and intentionally defective variants. • Debug environments and resolve infrastructure or test issues. • Document architecture decisions, expected outcomes, and validation logic. • Review tasks and solutions created by other technical experts.

• Designing, implementing, and managing cutting-edge network and infrastructure solutions • Providing support to development teams • Ensuring the smooth operation of the company's geo-distributed infrastructure • Maintenance and configuration of network equipment, bare metal servers, NAS • Maintenance and configuration of virtualization system (VMWare) • Administering multiple Linux servers • Monitoring the status of services and prompt resolution of emerging problems • Automating administrative tasks • Participating in the development and improvement of infrastructure • Interacting with developers, database administrators, DevOps engineers, architects