Azure Infrastructure SME

Summary: The Azure Infrastructure SME role requires a professional with over 5 years of experience in managing Azure IaaS and PaaS environments, focusing on enterprise-scale infrastructures. The position emphasizes expertise in implementing CAF-aligned Azure Landing Zones and operational experience across various Azure components. Key responsibilities include managing security, compliance, and operational support for Azure services, as well as automating processes for efficiency. The role is based in London, United Kingdom, and involves significant hands-on technical work in Azure environments.

Key Responsibilities:

• Administer Azure IaaS and PaaS services, ensuring availability, performance, and security.
• Maintain CAF-aligned Azure Landing Zones.
• Manage compute, storage, network, backup/restore, and associated infrastructure components.
• Apply Defender for Cloud recommendations and remediation to improve security score.
• Support CE+ compliance through patching, configuration hardening, and governance.
• Manage Azure Firewall, Application Gateway, WAF, and other security components.
• Support OS-level issues for application servers raised by the Application Team.
• Monitor logs, alerts, and health for IaaS and PaaS workloads.
• Perform monthly security patching across servers and services.
• Manage Microsoft Entra ID (Azure AD) users, groups, and access control.
• Administer Azure AD Domain Services (AADDS), Group Policies, Private DNS, and service accounts.
• Support SQL Server and Azure SQL PaaS instances.
• Assist with migrations of Azure workloads across subscriptions.
• Provide operational support for database server/instance management.
• Automate server start/stop aligned with business hours to optimise cost.
• Identify opportunities for operational automation and efficiency improvements.

Key Skills:

• 5+ years of hands-on experience managing Azure IaaS and PaaS environments in enterprise-scale infrastructures.
• Proven experience implementing and supporting CAF-aligned Azure Landing Zones.
• Demonstrated expertise in Microsoft Defender for Cloud remediation and security recommendations.
• Strong operational experience across compute, networking, storage, backup & restore within Azure.
• Practical experience performing Azure subscription-to-subscription workload migrations.
• Background supporting SQL Server (on IaaS) and Azure SQL PaaS environments.
• Experience in troubleshooting and resolving Windows Server OS issues for application servers.
• Hands-on experience managing Azure security components: Azure Firewall, Application Gateway, WAF.
• Log monitoring and analysis experience using Azure Monitor, Log Analytics, and Alerts.
• Experience managing Microsoft Entra ID (Azure AD) users, groups, access, and role assignments.
• Exposure to automation solutions such as PowerShell, Logic Apps, or Azure Automation.
• Experience managing AAD Domain Services, Group Policies, private DNS zones, and service accounts.
• Demonstrated ability to perform monthly patching and compliance maintenance in cloud environments.

Salary (Rate): undetermined

City: London

Country: United Kingdom

Working Arrangements: undetermined

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT