Azure Cloud Engineer

Job Description: Azure Cloud Engineer Zero Trust, AI Foundry, AKS & Fabric

Location: Hyderabad, IN / Delhi, IN

Experience: 12+ years

Employment Type: Full-time

Role Summary

We are looking for a midlevel Azure Cloud Engineer to support the implementation of Zero Trust security, secure cloud platforms, and modern data/AI workloads across our Azure environment. You will work handson with Azure services including AI Foundry, AKS, Microsoft Fabric, and core identity, networking, and governance components.

You will collaborate with senior architects and security teams to build secure, compliant, and scalable cloud solutions aligned with NIST, ISO, and insurance regulatory requirements.

Key Responsibilities

1. Azure Tenant Engineering & Zero Trust Support

• Implement and maintain Azure landing zones, subscriptions, and resource groups.
• Configure RBAC, PIM, Conditional Access, and identity governance controls.
• Deploy and manage Azure Policy and policy initiatives across environments.
• Support Zero Trust enforcement across identity, network, and workload layers.

2. AI Foundry Platform Engineering

• Deploy and configure AI Foundry workspaces, model endpoints, and compute environments.
• Integrate AI workloads with Key Vault, Storage, Private Endpoints, and network isolation.
• Support secure patterns for prompt flows, agents, vector stores, and model deployment pipelines.
• Assist with monitoring, logging, and access governance for AI workloads.

3. AKS Engineering & Security

• Deploy and maintain AKS clusters, node pools, and supporting infrastructure.

• Configure:

• Azure CNI, Pod-managed identities

• Network policies, Private clusters

• Support container security using:

• OPA/Gatekeeper, Secretless patterns

• Defender for Containers

• Assist with CI/CD pipelines using GitHub Actions and OIDC.

4. Microsoft Fabric Engineering

• Configure and manage Fabric workspaces, pipelines, and lakehouses.

• Implement:

• Access controls, Private endpoints

• Data security policies, Purview integration

• Support data governance and compliance requirements.

5. Data Protection & Key Management

• Implement and maintain Key Vault, Managed HSM, and secret rotation.
• Ensure encryption standards for data at rest and in transit.
• Support secure storage patterns for AKS, AI Foundry, and Fabric workloads.

6. Monitoring, Logging & Security Operations

• Configure and maintain:

• Azure Monitor, Log Analytics

• Defender for Cloud, Sentinel

• Build dashboards, alerts, and automated responses for cloud workloads.
• Support investigations of security alerts and compliance findings.

7. Compliance & Documentation

• Assist in mapping Azure controls to NIST, ISO, SOC 2, and insurance regulatory frameworks.
• Maintain engineering documentation, runbooks, and deployment guides.
• Support audit evidence collection and remediation activities.

Required Skills & Experience

• 3–6 years of handson Azure engineering experience.

• Experience with:

• Azure AD/Entra ID, Azure Policy
• Virtual networks, private endpoints, firewalls

• AKS (basic to intermediate), Azure Storage, Key Vault, Monitor

• Familiarity with AI Foundry, Azure ML, or modern AI platforms.
• Basic understanding of Microsoft Fabric or Synapse/Power BI.
• Experience with Bicep, ARM, or Terraform.
• Understanding of Zero Trust principles and cloud security fundamentals.

Preferred Qualifications

• Azure certifications (AZ104, AZ204, AZ500).
• Experience with GitHub Actions and DevOps automation.
• Exposure to regulated industries (insurance, financial services, healthcare).
• Familiarity with NIST or ISO security frameworks.

Success Criteria

• Reliable, secure deployments of Azure services and workloads.
• Consistent enforcement of Zero Trust and governance controls.
• Stable and secure AKS, AI Foundry, and Fabric environments.
• Highquality documentation and operational readiness.
• Strong collaboration with architects, security, and data/AI teams.