Azure DevOps / Azure Cloud Engineer

Must-Have Skills:

- 3+ years of hands-on experience in Microsoft Azure administration and DevOps. - Excellent verbal and written communication skills in English - Mandatory. - Strong hands-on experience with Microsoft Entra ID (Azure AD), including users, groups and enterprise applications. - Practical knowledge of Azure RBAC, least-privilege access, role assignments and access reviews. - Experience managing Azure subscriptions, resource groups and Development, QA, Staging and Production environments. - Experience managing App Registrations, Enterprise Applications, Service Principals and Managed Identities. - Experience configuring delegated and application API permissions, consent, secrets and certificates. - Ability to troubleshoot authentication, authorization, SSO and application-access issues. - Experience administering Azure DevOps organizations, projects, repositories, users and permissions. - Experience creating and maintaining CI/CD pipelines, YAML pipelines, branch policies and secure service connections. - Hands-on experience with Git, Azure CLI and/or PowerShell automation. - Working knowledge of Azure App Services, Virtual Machines, Storage Accounts, Key Vault, Azure SQL, VNets and NSGs. - Understanding of Azure Monitor, Application Insights, cloud security, governance and audit readiness. - Ability to investigate issues end-to-end and coordinate clearly with development, QA, technical management and project teams.

Daily Responsibilities:

- Administer Azure subscriptions, resource groups and environments; monitor resource health, availability and configuration. - Provision, modify and revoke Azure and Entra ID access for employees, developers and applications. - Maintain users, groups, roles and permissions through Azure RBAC and group-based access where appropriate. - Perform periodic access reviews; identify inactive, excessive or unauthorized access and remediate it promptly. - Manage App Registrations, Enterprise Applications, Service Principals, API permissions, secrets and certificates securely. - Support MFA, Conditional Access, authentication and authorization requirements; troubleshoot user and application access issues. - Manage Azure DevOps projects, repositories, permissions, branch policies and secure service connections. - Create, maintain and troubleshoot CI/CD and YAML pipelines for application builds and deployments. - Support Azure infrastructure including App Services, VMs, Storage Accounts, Key Vault, databases, VNets and monitoring services. - Automate repeatable administration and deployment tasks using PowerShell, Azure CLI and scripting. - Support Infrastructure as Code using Terraform, ARM templates or Bicep where required. - Maintain clear documentation, audit trails, incident summaries and access reports in English. - Work with technical teams to improve cloud security, governance, deployment reliability and environment segregation.

Good-to-Have:

- Conditional Access, MFA, Privileged Identity Management (PIM) and Entra ID Access Reviews. - OAuth 2.0, OpenID Connect, SSO and application integration patterns. - Terraform, ARM templates and Bicep. - Docker, Kubernetes and Azure Kubernetes Service (AKS). - Microsoft Defender for Cloud, Azure Policy and DevSecOps practices. - Linux and Windows Server administration; networking fundamentals including firewalls and load balancers. - AWS IAM or AWS administration exposure. - Grafana or other observability and monitoring platforms.

Preferred Certifications:

- AZ-900 – Microsoft Azure Fundamentals. - AZ-104 – Microsoft Azure Administrator Associate. - AZ-400 – Designing and Implementing Microsoft DevOps Solutions. - SC-300 – Microsoft Identity and Access Administrator.

Candidate Profile: We are looking for an engineer who is strong in Azure administration and identity and access management, not only CI/CD pipelines. The candidate should be comfortable owning the lifecycle from people and groups to roles, permissions, applications, Azure resources, subscriptions and DevOps access.

- Can determine who has access to a subscription, resource group, Production environment, application or API, and why. - Can provide the right level of access without over-privileging users or applications. - Communicates technical issues, root causes, remediation plans and documentation clearly in English to technical and non-technical stakeholders.

Key Performance Areas:

- Azure subscription, resource and environment management. - Entra ID user, group and application administration. - Accurate Azure RBAC and least-privilege governance. - Access provisioning, deprovisioning and audit readiness. - Application identity, Service Principal and API permission management. - Azure DevOps administration and CI/CD pipeline reliability.