Azure Cloud & Infrastructure Engineer

Position: Azure Cloud \& Infrastructure EngineerLocation: PuneDepartment: Group Digital Information ServicesType: Employee \- Permanent

• *Azure and infrastructure operations**
• Operate, maintain and improve Microsoft Azure infrastructure services and on\-premises Windows and Linux server platforms.
• Administer Azure Virtual Machines, availability zones and sets, virtual networks, storage, load balancing and supporting platform services.
• Perform sizing, configuration, patching, upgrades, lifecycle management and decommissioning across hybrid infrastructure.
• Monitor availability, capacity, performance and platform health; take preventive action before service quality is affected.
• Plan and execute infrastructure migrations, modernisation activities and technical service improvements.

• *Hybrid cloud and connectivity**
• Engineer and support Azure virtual networks, subnets, routing, private connectivity, network security groups and hybrid connectivity.
• Support VPN and ExpressRoute services and troubleshoot connectivity between Azure, on\-premises environments and business sites.
• Maintain DNS, DHCP, name resolution and related core infrastructure services.
• Work with network and security specialists to ensure secure and resilient communication across the hybrid environment.
• Contribute to landing zones, hub\-and\-spoke designs and standard patterns for scalable Azure delivery.

• *Identity and access**
• Administer Active Directory, Microsoft Entra ID, group policies and hybrid identity services.
• Maintain Microsoft Entra Connect and support identity synchronisation, authentication and access\-related troubleshooting.
• Implement role\-based access control, Privileged Identity Management and least\-privilege administration.
• Support single sign\-on, multifactor authentication, Conditional Access and access\-governance requirements.
• Ensure privileged access and infrastructure changes are approved, traceable and regularly reviewed.

• *Security, compliance and resilience**

• Apply security baselines, operating\-system hardening, encryption, endpoint protection and vulnerability remediation.
• Monitor relevant security alerts, platform logs and configuration risks and support incident investigation and remediation.
• Maintain certificates and key infrastructure controls in accordance with approved standards.
• Provide audit evidence and correct identified control or compliance gaps.
• Partner with Information Security to embed security\-by\-design in infrastructure solutions and changes.

• *Backup, recovery and continuity**

• Configure and maintain Azure and on\-premises backup, retention and recovery services.
• Perform scheduled restore tests and document evidence that systems and data are recoverable.
• Implement and maintain disaster\-recovery arrangements for critical infrastructure services.
• Maintain recovery procedures, dependencies, ownership and operational runbooks.
• Support business\-continuity and disaster\-recovery exercises and close identified improvement actions.

Storage, virtualisation and platform services

• Operate Azure storage services and on\-premises SAN, NAS and file services.
• Monitor storage capacity, performance, growth and availability and recommend preventive improvements.
• Administer permissions, quotas and secure access to infrastructure\-managed storage services.
• Support VMware, Hyper\-V or comparable virtualisation platforms where used by Piab.
• Maintain physical\-server firmware, storage, clustering and hardware lifecycle activities where applicable.

• *Monitoring, incidents and service management**

• Use Azure Monitor, PRTG, system logs and other approved tools to provide proactive monitoring and actionable alerting.
• Own and resolve Azure and infrastructure incidents, service requests, problems and changes in the IT service management platform.
• Perform root\-cause analysis for recurring incidents and drive corrective and preventive actions through to closure.
• Coordinate technical escalations with Microsoft, service providers and technology vendors.
• Ensure changes include risk assessment, testing, rollback planning, stakeholder communication and post\-change validation.

• *Automation, governance and cost optimisation**

• Automate repeatable infrastructure tasks using PowerShell, Bicep, Terraform, Azure automation or approved equivalent tooling.
• Improve consistency through infrastructure\-as\-code, standard templates, policy and configuration validation.
• Monitor Azure consumption, identify unused or underutilised resources and recommend right\-sizing or scaling actions.
• Maintain tagging, ownership and governance controls that support cost transparency and lifecycle management.
• Prepare evidence\-based cost, capacity and optimisation recommendations for IT Operations leadership.

• *Documentation and collaboration**

• Maintain current architecture diagrams, inventories, configuration records, runbooks, support procedures and recovery documentation.
• Ensure operational handovers include ownership, monitoring, support model, dependencies and acceptance criteria.
• Work effectively with Service Desk, Security, network, application and business teams across countries and time zones.
• Share knowledge, support technical development across IT Operations and provide clear guidance to colleagues.
• Challenge service providers constructively and maintain clear accountability for delivery, quality and follow\-up.

• *Required experience and skills**

• Proven hands\-on experience operating Microsoft Azure and hybrid infrastructure in a business\-critical environment.
• Strong practical experience with Azure Virtual Machines, networking, storage, security, monitoring, backup and recovery.
• Experience administering Windows Server and working knowledge of Linux server environments.
• Practical knowledge of Active Directory, Microsoft Entra ID, hybrid identity, RBAC, PIM, MFA and Conditional Access.
• Experience with Azure virtual networks, VPN, ExpressRoute, DNS, routing, network security groups and load balancing.
• Experience with virtualisation, enterprise storage, backup and disaster\-recovery technologies.
• Ability to diagnose complex platform, performance, connectivity and authentication issues methodically.
• Experience with ITIL\-aligned incident, problem, change, request and configuration\-management processes.
• Clear professional English and the ability to collaborate across countries, cultures, suppliers and time zones.

• *Preferred qualifications**

• Bachelor's degree in information technology, computer science, engineering or equivalent practical experience.
• Microsoft Azure certifications such as AZ\-104, AZ\-305 or AZ\-700; AZ\-900 is considered foundational.
• Experience with PowerShell, Bicep, Terraform, ARM templates or other infrastructure\-as\-code approaches.
• Experience with Azure landing zones, Azure Policy, Defender for Cloud, cost management and hybrid\-cloud governance.
• Relevant VMware, Windows Server, Linux, backup, security or ITIL certifications.

• *Accountability and decision expectations**

• Take end\-to\-end ownership of assigned Azure and infrastructure work, including follow\-up, communication and documented closure.
• Escalate material availability, security, capacity, cost and supplier risks early, with evidence and a recommended action.
• Do not implement production changes without required approval, testing and rollback readiness.
• Balance reliability, security, performance, cost and speed using Piab standards and approved governance.

• Act as a trusted technical partner while maintaining clear global standards and documented exceptions.

• *Success measures**

• Stable, secure and well\-performing Azure and on\-premises infrastructure services.
• Reduced incident recurrence and restoration time through monitoring, root\-cause analysis and preventive improvement.
• Backup, restore and disaster\-recovery controls are tested, documented and evidenced.
• Infrastructure patches, vulnerabilities and security findings are handled within agreed priorities.
• Azure resources are appropriately governed, tagged, right\-sized and cost\-transparent.
• Changes and migrations are delivered safely with complete documentation and operational handover.
• Architecture diagrams, inventories, configuration records and runbooks remain accurate and current.

• *Key interfaces**

• Head of IT Operations and the Global IT Operations team.
• Information Security, Service Desk, Network, EUC and application teams.
• Piab business sites and technical stakeholders.
• Microsoft, managed\-service providers and infrastructure technology partners.

• *What happens next?**

======================

### **Your hiring journey at Piab Group:**

• **Application received:** We confirm that your application has been successfully submitted and is in our system.
• **Profile review:** Our Recruitment Team will review your profile and get in touch with you.
• **Positive match?** If your profile matches our requirements, we’ll invite you to proceed to the next steps in the process.
• **Getting to know you:** You’ll have the opportunity to meet your potential Hiring Manager and possibly other team members.
• **People \& Culture exchange:** You may meet with our People \& Culture team to learn more about Piab Group’s values and working environment.
• **Feedback \& next steps:** We will keep you updated with clear feedback and information about the next steps – or even an offer!