Cloud & Identity Engineer

Role summary

You build the Azure foundation and keep it secure and observable. You deploy the landing zone and servers as code, set up backup and DR, monitoring and alerting, and extend the existing Active Directory domain into Azure. You also lead hypercare after go-live.

Key responsibilities

• Deploy the Azure landing zone, policies, VMs, disks and Key Vault from the capacity plan using Infrastructure as Code (Terraform or Bicep)
• Configure Azure Bastion and harden the private subnet
• Build and validate backup and DR: Azure Backup vault (SQL 15-minute logs, daily VM backups), immutable Blob copy, and documented restore tests
• Set up Azure Monitor, Log Analytics, alert rules and a Workbook dashboard
• Deploy a Domain Controller in Azure in the existing domain; configure AD site, DNS and validate GPO and service accounts
• Lead the 2-week hypercare: stabilisation, tuning and issue resolution
• Contribute to testing, rehearsal, cutover and knowledge transfer

Deliverables you own

Deployed Azure environment and IaC code · resource inventory · backup policies and restore test report · DR runbook · alert matrix and monitoring dashboard · identity design record and AD replication health report · hypercare closure report

Must-have

• 5+ years in Azure infrastructure, with hands-on production deployments
• Strong Infrastructure as Code skills (Terraform and/or Bicep) with Git-based workflows
• Active Directory Domain Services, DNS and Group Policy: extending an existing domain to Azure without disrupting it
• Azure Backup, Azure Monitor and Log Analytics in real projects
• Windows Server administration and PowerShell scripting
• AZ-104 or AZ-500 (or equivalent proven experience)

Good to have

• Azure Policy, Defender for Cloud, and security baselines (CIS)
• Experience with healthcare or other regulated, always-on environments
• Experience with immutable storage and ransomware-resilient backup design

What independence looks like

Given a capacity plan, you can stand up a compliant environment, prove the backups restore, and hand over runbooks without being walked through each step.

Pay: From ₹500,000.00 per year

Work Location: Hybrid remote in Pune, Maharashtra