Job Description

About The Company:

iLink Digital is a Global Software Solution Provider and Systems Integrator, delivers next-generation technology solutions to help clients solve complex business challenges, improve organizational effectiveness, increase business productivity, realize sustainable enterprise value and transform your business inside-out. iLink integrates software systems and develops custom applications, components, and frameworks on the latest platforms for IT departments, commercial accounts, application services providers (ASP) and independent software vendors (ISV). iLink solutions are used in a broad range of industries and functions, including healthcare, telecom, government, oil and gas, education, and life sciences. iLink’s expertise includes Cloud Computing & Application Modernization, Data Management & Analytics, Enterprise Mobility, Portal, collaboration & Social Employee Engagement, Embedded Systems and User Experience design etc.

What makes iLink's offerings unique is the fact that we use pre-created frameworks, designed to accelerate software development and implementation of business processes for our clients. iLink has over 60 frameworks (solution accelerators), both industry-specific and horizontal, that can be easily customized and enhanced to meet your current business challenges.

Requirements

Azure Landing Zone Architecture & Implementation

- Design and implement enterprise-scale Azure Landing Zones based on Microsoft Cloud Adoption Framework.

- Design Azure management group, subscription, resource group, and resource organization structures.

- Establish Azure governance including:

- Azure Policy

- RBAC

- Management Groups

- Subscription governance

- Resource tagging

- Naming standards

- Azure Blueprints/Policy-based governance where applicable

- Implement centralized logging, monitoring, security, and management capabilities.

- Design and implement hub-and-spoke or Virtual WAN-based Azure network architectures.

- Configure Azure Firewall, NSGs, route tables, Private Endpoints, Private DNS, and network segmentation.

- Implement secure connectivity between Azure and on-premises environments using:

- Express Route

- Site-to-Site VPN

- Point-to-Site VPN where required

- Integrate Azure environments with enterprise Active Directory / Microsoft Entra ID.

- Design identity, access, privileged access, and authentication models.

- Establish infrastructure standards and reusable deployment patterns.

2. On-Premises to Azure Migration

- Assess existing on-premises infrastructure and applications for Azure migration readiness.

- Develop migration strategies including:

- Rehost

- Replatform

- Refactor

- Retire

- Retain

- Perform infrastructure discovery and dependency analysis.

- Develop migration waves and detailed migration plans.

- Migrate Windows and Linux servers from on-premises environments to Azure.

- Implement Azure Migrate for discovery, assessment, sizing, dependency mapping, and migration.

- Perform workload sizing and right-sizing based on performance and business requirements.





- Coordinate migration activities with application, database, network, security, and infrastructure teams.

- Execute production migrations with minimal business disruption.

- Perform post-migration validation, optimization, and stabilization.

- Troubleshoot connectivity, performance, authentication, and application issues following migration.

3. Azure Infrastructure Engineering

- Deploy and manage Azure infrastructure including:

- Azure Virtual Machines

- VM Scale Sets

- Managed Disks

- Storage Accounts

- Azure Load Balancer

- Application Gateway

- Azure Bastion

- Azure Firewall

- Azure Virtual Network

- Private Endpoints

- Azure DNS / Private DNS

- Design highly available architectures using Availability Zones and Availability Sets.

- Implement infrastructure using Infrastructure as Code (IaC).

- Develop and maintain Terraform, Bicep, or ARM templates.

- Automate infrastructure deployment and configuration using Azure Dev Ops or Git Hub Actions.

- Develop operational automation using Power Shell, Azure CLI, and scripting.

4. Azure Backup & Disaster Recovery

- Design and implement enterprise Azure Backup strategies.

- Configure and manage Recovery Services Vaults and Backup Vaults.

- Implement backup policies based on application criticality and business requirements.

- Configure VM, file, database, and workload-specific backup solutions.

- Implement backup retention, encryption, immutability, and recovery testing.

- Design and implement Azure Site Recovery (ASR) for disaster recovery.

- Develop DR architecture and recovery strategies for critical workloads.

- Define and implement:

- RPO – Recovery Point Objective

- RTO – Recovery Time Objective

- Perform regular disaster recovery drills and failover/failback testing.

- Document DR runbooks and recovery procedures.

- Monitor backup and replication health and proactively resolve failures.

5. Networking & Security

- Work with network and security teams to design secure Azure network architectures.

- Implement network segmentation and security controls.

- Configure NSGs, ASGs, UDRs, Azure Firewall, WAF, and Private Link.

- Troubleshoot hybrid connectivity between Azure and on-premises datacenters.

- Implement secure access using Microsoft Entra ID, RBAC, PIM, and managed identities.

- Apply security best practices to Azure infrastructure.

- Support Microsoft Defender for Cloud and security recommendations.

- Ensure Azure infrastructure meets enterprise security and compliance requirements.

6. Monitoring, Operations & Optimization

- Implement Azure Monitor, Log Analytics, Application Insights, and alerts.

- Develop operational dashboards and monitoring standards.

- Monitor infrastructure performance,



availability, capacity, and health.

- Troubleshoot Azure infrastructure incidents and performance issues.

- Perform Azure cost optimization and resource right-sizing.

- Implement tagging and chargeback/showback models.

- Identify opportunities to reduce infrastructure and operational costs.

- Participate in on-call/support activities when required.

7. Documentation & Architecture

- Create detailed architecture diagrams and technical documentation.

- Develop:

- High-Level Designs (HLD)

- Low-Level Designs (LLD)

- Migration plans

- DR plans

- Network diagrams

- Operational runbooks

- Implementation guides

- Maintain Azure infrastructure standards and engineering documentation.

- Provide technical recommendations to architects and leadership.

Required Technical Skills

Azure

Strong hands-on experience with:

- Azure Landing Zones

- Azure Management Groups

- Azure Subscriptions

- Azure Policy

- Azure RBAC

- Microsoft Entra ID

- Azure Virtual Networks

- Azure Firewall

- NSG / UDR

- Private Endpoint / Private Link

- Private DNS

- Express Route

- Site-to-Site VPN

- Azure Bastion

- Load Balancer

- Application Gateway / WAF

- Azure Virtual Machines

- Azure Storage

- Azure Monitor

- Log Analytics

- Microsoft Defender for Cloud

Migration

- Azure Migrate

- Windows Server migration

- Linux migration

- Physical-to-Azure migration

- VMware-to-Azure migration

- Hyper-V-to-Azure migration

- Application dependency mapping

- Migration planning and wave execution

- Post-migration optimization

Backup & DR

- Azure Backup

- Recovery Services Vault

- Azure Backup Vault

- Azure Site Recovery

- VM replication

- Failover/failback

- DR testing

- RPO/RTO planning

- Backup retention and recovery strategy

Automation / IaC

Experience with at least one:

- Terraform

- Bicep

- ARM Templates

And preferably:

- Power Shell

- Azure CLI

- Azure Dev Ops

- Git Hub Actions

- CI/CD pipelines

Required Experience

- 7+ years of experience in infrastructure engineering, cloud engineering, or enterprise infrastructure.

- 4+ years of hands-on Azure experience.

- Proven experience designing and implementing Azure Landing Zones.

- Experience migrating enterprise workloads from on-premises datacenters to Azure.

- Strong understanding of hybrid cloud architecture.

- Hands-on experience implementing Azure Backup and Azure Site Recovery.

- Experience with enterprise networking and security.

- Experience working with Windows Server, Active Directory, DNS, DHCP, and enterprise infrastructure.

- Experience creating HLD/LLD architecture documentation.

- Ability to troubleshoot complex infrastructure and networking issues.

- Experience working in large enterprise environments.

Benefits

- Competitive salaries
- Medical Insurance
- Employee Referral Bonuses
- Performance Based Bonuses
- Versatile Work Options & Fun Culture

- Robust Learning & Development Programs
- In-House Technology Training

📌 Security Engineer (India)
🏢 iLink Digital
📍 India