Contract W2: Azure Security Engineer, Remote, Contract, $70,000 - $80,000/A DOE.
Job Title: Sr. Azure Engineer
Location: Dallas, TX (Remote)
Requirements
Azure Landing Zone Architecture & Implementation
- Design and implement enterprise Azure Landing Zones based on Microsoft Cloud Adoption Framework and Azure best practices.
- Design:
- Management Groups
- Subscriptions
- Resource Groups
- Naming and tagging standards
- Azure Policy
- RBAC
- Governance
- Cost management
- Design and implement Azure platform foundations for enterprise workloads.
- Establish centralized logging, monitoring, security, and management services.
- Design and implement hub-and-spoke and/or Azure Virtual WAN architectures.
- Implement secure connectivity between Azure and on-premises environments.
- Develop reusable Azure infrastructure patterns and standards.
- Create HLD and LLD architecture documentation.
2. Azure Infrastructure Design & Implementation
Design, deploy, configure, and manage:
- Azure Virtual Machines
- Virtual Machine Scale Sets
- Managed Disks
- Storage Accounts
- Azure Virtual Networks
- Subnets
- Network Security Groups
- Route Tables / UDR
- Azure Load Balancer
- Application Gateway
- Web Application Firewall
- Azure Firewall
- Azure Bastion
- Private Endpoints
- Private DNS
- Azure Key Vault
- Azure Monitor
- Log Analytics
- Azure Automation
Implement highly available and resilient infrastructure using:
- Availability Zones
- Availability Sets
- Load balancing
- Autoscaling
- Redundant architecture
- Multi-region architectures where required
3. On-Premises to Azure Migration
Lead infrastructure migration initiatives from traditional datacenters to Azure.
Responsibilities include:
- Assess existing datacenter infrastructure and workloads.
- Perform Azure readiness and dependency assessments.
- Develop migration strategies using:
- Rehost
- Replatform
- Refactor
- Retire
- Retain
- Use Azure Migrate for discovery, assessment, dependency mapping, sizing, and migration.
- Develop migration waves and detailed migration plans.
- Migrate Windows and Linux workloads to Azure.
- Support VMware and Hyper-V workload migrations.
- Plan and execute production migrations with minimal business disruption.
- Perform post-migration validation and stabilization.
- Right-size migrated workloads and optimize Azure infrastructure.
- Troubleshoot application, network, identity, and infrastructure issues after migration.
4. Hybrid Cloud Networking
Design and implement secure hybrid connectivity between Azure and on-premises datacenters.
Experience with:
- ExpressRoute
- Site-to-Site VPN
- Azure VPN Gateway
- Azure Virtual WAN
- Hub-and-spoke networking
- Azure Firewall
- Network Security Groups
- User Defined Routes
- Private Link
- Private Endpoints
- Private DNS
- DNS forwarding
- Network segmentation
Work with network teams to troubleshoot routing, DNS, firewall, latency, and connectivity issues.
5. Identity & Access Management
Implement secure Azure identity and access architecture using:
- Microsoft Entra ID
- Azure RBAC
- Managed Identities
- Privileged Identity Management
- Conditional Access
- Service Principals
- Enterprise Applications
- Hybrid Active Directory integration
Support integration between on-premises Active Directory and Azure.
Implement least-privilege access and secure administrative practices.
