Azure Cloud Engineer (L3)

Required technical skills

Candidates need hands-on production experience in every domain below

Domain

Required knowledge

Azure core services

Virtual machines and scale sets, availability zones, managed disks, storage accounts, Azure Files, Azure SQL fundamentals

Landing zones and governance

CAF, ALZ design areas, management groups, subscription vending, Azure Policy, RBAC, tagging, Well-Architected Framework, Azure Resource Graph

Azure Virtual Desktop

Host pools, scaling plans, FSLogix, Azure Files and Azure NetApp Files, Azure Compute Gallery, VM Image Builder, App Attach, RDP Shortpath, AVD Insights, Intune for multi-session

Networking

Hub-and-spoke, Virtual WAN, BGP, ExpressRoute, VPN Gateway, Azure Firewall, NSGs and ASGs, Private Link, Private DNS, DNS Private Resolver, Application Gateway, Front Door, NAT Gateway, Network Watcher

Identity

Microsoft Entra ID, Entra Connect and Cloud Sync, Conditional Access, PIM, managed identities, Active Directory Domain Services, Group Policy

Security

Defender for Cloud, Microsoft cloud security benchmark, Key Vault, customer-managed keys, Azure Bastion, just-in-time access, DDoS Protection, Sentinel fundamentals

DevOps and IaC

Terraform (state, modules, remote backends), Bicep and ARM, Git, YAML pipelines in Azure DevOps or GitHub Actions, workload identity federation

Scripting

PowerShell (Az module), Azure CLI, KQL and Bash; Python for automation

Containers

AKS networking (Azure CNI), ingress, identity, cluster upgrades, Azure Container Registry

Monitoring and operations

Azure Monitor, Log Analytics, Azure Monitor Agent, alerts and workbooks, Application Insights, Azure Update Manager, Azure Arc, Service Health

Backup and DR

Azure Backup (immutable and soft-delete vaults), Azure Site Recovery, RPO/RTO design, region pairs

Cost management

Cost Management, budgets, Azure Advisor, reservations, savings plans, Azure Hybrid Benefit

Service management

ITIL 4 incident, problem and change practices, ServiceNow or similar ITSM, Azure Lighthouse, SLA reporting

Operating systems

Windows Server (AD DS, DNS, DHCP, file services), Windows 11 multi-session, Linux (RHEL, Ubuntu) administration