Azure Infrastructure Engineer

American Residential Services

. Design, deploy, and maintain Azure landing zones, management groups, virtual machines, storage, backup, monitoring, and governance .

Posted 10/16/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing, deploying, and maintaining Azure infrastructure, including VNets, NSGs, and disaster recovery solutions. Proficient in troubleshooting complex Azure issues and implementing governance and compliance measures.

Highest-signal resume keywords

Azure Infrastructure EngineeringDisaster Recovery DesignTerraform AutomationAzure DevOps PipelinesCompliance with PCI DSS and NIST

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Azure VNetsSite RecoveryPowerShellTerraformAzure BackupActive DirectoryDNS ManagementAzure SQL Managed InstanceExpressRouteRoot-Cause Analysis

Soft Skills

Independent TroubleshootingMentoring PeersCollaboration

Tools & Technologies

Azure DevOpsGitAzure MonitorApplication InsightsAzure CLIAKSVMware vSphereLogic AppsService BusFront Door

Certifications & Qualifications

AZ-104AZ-305AZ-700AZ-500AZ-400HashiCorp Terraform Associate

Industry Keywords

PCI DSSNISTCIS ControlsHybrid EnvironmentsCloud Governance

Tech Stack

Tools & technologies

AzureCloudDNSDockerSQLTerraformVMware.NET

About the role

Key responsibilities & impact

Design, deploy, and maintain Azure landing zones, management groups, virtual machines, storage, backup, monitoring, and governance
Troubleshoot connectivity, performance, access, and availability issues across VM, OS, network, DNS, firewall, and identity layers
Perform root-cause analysis and implement durable fixes
Develop runbooks and operational standards
Participate in incident response, change management, maintenance windows, and on-call
Design and troubleshoot VNets, NSGs, routing/UDRs, hub-and-spoke or Virtual WAN, Azure Firewall, VPN Gateway, and ExpressRoute
Design Azure and on-premises name resolution using Private DNS, DNS Private Resolver, and conditional forwarding
Implement private connectivity to PaaS services using private endpoints
Support application delivery with Front Door, Application Gateway, load balancing, WAF, and TLS certificate lifecycle management
Work with Networking on firewall rules, IP addressing, NAT, and datacenter, branch, and third-party connectivity
Plan and execute VMware and Windows migrations to Azure, including dependency assessment, Azure Migrate, lift-and-shift, test migrations, cutover, and post-migration support
Produce cutover plans, validation checklists, and rollback criteria; execute off-hours production cutovers
Support Azure infrastructure for SQL Server migrations
Maintain hybrid domain controllers, DNS, and Active Directory integration for Azure workloads
Design and test disaster recovery using Site Recovery, geo-redundant storage, and region/availability-zone design against RTO and RPO targets
Operate Azure Backup and evaluate backup and replication platforms; document and report recovery test results
Provide infrastructure for App Service, Functions, Logic Apps, Service Bus, and API Management
Support AKS at the platform level with Application Development
Build, modify, and troubleshoot Terraform using modules, remote state, environment separation, and drift management
Use Git pull requests and code review; maintain Azure DevOps infrastructure pipelines with approval gates and self-hosted agents
Automate operations with PowerShell and Azure CLI
Apply Entra ID, RBAC, PIM, Conditional Access, and managed identities
Implement governance with Azure Policy, management groups, tagging, and Defender for Cloud
Partner with Security, Compliance, and Audit on PCI DSS, NIST, and CIS controls, remediation, and audit evidence
Build Azure Monitor and Log Analytics alerts, workbooks, and dashboards; tune alert noise and logging volume
Use Application Insights for tracing
Manage Azure costs using Cost Management, Advisor, reservations, and savings plans
Train teammates in Azure and cloud practices and learn from other teams

Requirements

What you’ll need

Bachelor's degree in IT, Computer Science, Engineering, or related field; equivalent professional experience considered
5+ years of enterprise infrastructure engineering, including 3+ years of hands-on production Azure
Hands-on experience with Azure VNets, NSGs, routing, DNS, and ExpressRoute or site-to-site VPN
Direct involvement in on-premises to Azure migration preparation, cutover, rollback planning, and post-migration support
Working knowledge of VMware vSphere, Windows Server, Active Directory, DNS, and Group Policy
Experience with Azure Backup and Site Recovery or equivalent DR design against RTO/RPO targets
Working proficiency with Terraform, PowerShell, Git, and Azure DevOps infrastructure pipelines
Experience with Entra ID, RBAC, least privilege, and Azure Policy
Independent troubleshooting and root-cause analysis of complex Azure issues
Experience supporting PCI DSS, NIST, CIS, or similar compliance requirements
Working knowledge of App Service, Functions, Logic Apps, Service Bus, API Management, Azure SQL Managed Instance, and SQL Server on Azure VMs
Working knowledge of Azure Virtual Desktop/FSLogix, Bicep/ARM, Defender for Cloud, and Sentinel
Working knowledge of AKS, Docker, Helm, and Cosmos DB
Current Azure certifications (AZ-104, AZ-305, AZ-700, AZ-500, AZ-400) or HashiCorp Terraform Associate preferred
Preferred experience with AKS platform operations, Azure SQL Managed Instance, IIS/.NET application migrations, PCI DSS audit evidence, CrowdStrike or similar security platforms, multi-site hybrid environments, mentoring peers, and AI tools
Availability for scheduled after-hours maintenance and cutovers, occasional incident response, and on-call as required
Candidates must demonstrate each required qualification with specific examples of work performed as an individual contributor

Benefits

Comp & perks

Remote work arrangement
Regular business hours with scheduled after-hours maintenance and cutovers
Occasional travel for project work, meetings, or datacenter activities