Must-Have Skills:
- 3+ years of hands-on experience in Microsoft Azure administration and DevOps.
- Excellent verbal and written communication skills in English - Mandatory.
- Strong hands-on experience with Microsoft Entra ID (Azure AD), including users, groups and enterprise applications.
- Practical knowledge of Azure RBAC, least-privilege access, role assignments and access reviews.
- Experience managing Azure subscriptions, resource groups and Development, QA, Staging and Production environments.
- Experience managing App Registrations, Enterprise Applications, Service Principals and Managed Identities.
- Experience configuring delegated and application API permissions, consent, secrets and certificates.
- Ability to troubleshoot authentication, authorization, SSO and application-access issues.
- Experience administering Azure DevOps organizations, projects, repositories, users and permissions.
- Experience creating and maintaining CI/CD pipelines, YAML pipelines, branch policies and secure service connections.
- Hands-on experience with Git, Azure CLI and/or PowerShell automation.
- Working knowledge of Azure App Services, Virtual Machines, Storage Accounts, Key Vault, Azure SQL, VNets and NSGs.
- Understanding of Azure Monitor, Application Insights, cloud security, governance and audit readiness.
- Ability to investigate issues end-to-end and coordinate clearly with development, QA, technical management and project teams.
Daily Responsibilities:
- Administer Azure subscriptions, resource groups and environments; monitor resource health, availability and configuration.
- Provision, modify and revoke Azure and Entra ID access for employees, developers and applications.
- Maintain users, groups, roles and permissions through Azure RBAC and group-based access where appropriate.
- Perform periodic access reviews; identify inactive, excessive or unauthorized access and remediate it promptly.
- Manage App Registrations, Enterprise Applications, Service Principals, API permissions, secrets and certificates securely.
- Support MFA, Conditional Access, authentication and authorization requirements; troubleshoot user and application access issues.
- Manage Azure DevOps projects, repositories, permissions, branch policies and secure service connections.
- Create, maintain and troubleshoot CI/CD and YAML pipelines for application builds and deployments.
- Support Azure infrastructure including App Services, VMs, Storage Accounts, Key Vault, databases, VNets and monitoring services.
- Automate repeatable administration and deployment tasks using PowerShell, Azure CLI and scripting.
- Support Infrastructure as Code using Terraform, ARM templates or Bicep where required.
- Maintain clear documentation, audit trails, incident summaries and access reports in English.
- Work with technical teams to improve cloud security, governance, deployment reliability and environment segregation.
Good-to-Have:
- Conditional Access, MFA, Privileged Identity Management (PIM) and Entra ID Access Reviews.
- OAuth 2.0, OpenID Connect, SSO and application integration patterns.
- Terraform, ARM templates and Bicep.
- Docker, Kubernetes and Azure Kubernetes Service (AKS).
- Microsoft Defender for Cloud, Azure Policy and DevSecOps practices.
- Linux and Windows Server administration; networking fundamentals including firewalls and load balancers.
- AWS IAM or AWS administration exposure.
- Grafana or other observability and monitoring platforms.
Preferred Certifications:
- AZ-900 – Microsoft Azure Fundamentals.
- AZ-104 – Microsoft Azure Administrator Associate.
- AZ-400 – Designing and Implementing Microsoft DevOps Solutions.
- SC-300 – Microsoft Identity and Access Administrator.
Candidate Profile:
We are looking for an engineer who is strong in Azure administration and identity and access management, not only CI/CD pipelines. The candidate should be comfortable owning the lifecycle from people and groups to roles, permissions, applications, Azure resources, subscriptions and DevOps access.
- Can determine who has access to a subscription, resource group, Production environment, application or API, and why.
- Can provide the right level of access without over-privileging users or applications.
- Communicates technical issues, root causes, remediation plans and documentation clearly in English to technical and non-technical stakeholders.
Key Performance Areas:
- Azure subscription, resource and environment management.
- Entra ID user, group and application administration.
- Accurate Azure RBAC and least-privilege governance.
- Access provisioning, deprovisioning and audit readiness.
- Application identity, Service Principal and API permission management.
- Azure DevOps administration and CI/CD pipeline reliability.