Role overviewThe Infrastructure Engineer (Azure) is a hybrid remote role reports to the CTO and works across technology, operations and business teams in the US, Europe and Asia-Pacific. Day to day, you will run and optimise Azure workloads, keep networking secure and reliable, resolve infrastructure incidents and service requests, and automate routine tasks. You will also write and maintain the IT and cloud policies that keep the environment secure, compliant and auditable, and lead capacity planning, disaster recovery and security reviews.

Location:
Hybrid / remote Reports to: Chief Technology Officer Employment type: Full-time

Key responsibilities
Azure infrastructure and operations
• Design, build and operate Azure environments, including virtual machines, App Services, Azure SQL, storage accounts, Key Vault and Azure Functions.
• Manage Azure subscriptions, management groups, resource groups and landing zones in line with the Microsoft Cloud Adoption Framework.
• Monitor performance and availability using Azure Monitor, Log Analytics and Application Insights, and tune workloads for reliability and cost.
• Manage patching, backups and configuration for Windows and Linux servers, cloud and remaining on-premises.
• Resolve infrastructure incidents and service requests, and carry out root-cause analysis. Networking and security
• Configure and secure Azure networking: VNets, NSGs, Azure Firewall, VPN gateways, Private Endpoints and DNS.
• Administer Microsoft Entra ID (Azure AD): identities, groups, conditional access, MFA and Privileged Identity Management.
• Operate Microsoft Defender for Cloud and Defender for Endpoint, and act on security recommendations and alerts.
• Manage Microsoft 365 security settings, including Intune device management, email security and data loss prevention. Governance, policy and compliance
• Write, implement and maintain IT and cloud policies, standards and procedures (see the next section).
• Enforce policy technically through Azure Policy, management group hierarchy, RBAC, tagging standards and resource locks.
• Maintain evidence and documentation for internal audit,



regulators and counterparties, including due diligence questionnaires.
• Run periodic access reviews, security reviews and policy compliance reporting for the CTO. Automation and resilience
• Automate provisioning and routine tasks using Terraform or Bicep, PowerShell and Azure DevOps or GitHub Actions pipelines.
• Plan and test disaster recovery and business continuity using Azure Backup and Azure Site Recovery.
• Lead capacity planning and cost management, using Azure Cost Management and reservations.
• Support new product and platform launches across US, European and Asia-Pacific markets. Policies and standards you will ownYou will draft, implement and review these policies with the CTO, IT team and compliance, and keep them current at least annually. Policy / standard What it covers
• Information security policy
• Overall security principles, roles and responsibilities
• Access control and identity policy
• Joiners, movers and leavers; MFA; least privilege; privileged access; access reviews
• Cloud governance and Azure usage standard
• Subscription structure, naming and tagging, approved services and regions, Azure Policy baselines
• Password and authentication policy
• Password rules, MFA, passwordless and service account credentials
• Network security policy
• Segmentation, firewall rules, remote access and VPN, change control on network rules
• Patch and vulnerability management policy
• Patching cadence, severity-based remediation timelines, exception handling
• Backup, disaster recovery and business continuity policy
• Backup scope and retention, RPO and RTO targets, DR test schedule
• Change management policy
• Change requests, approvals, testing and rollback




• Incident response policy
• Detection, escalation, communication and post-incident review
• Data protection and encryption policy
• Data classification, encryption at rest and in transit, key management, DLP
• Logging and monitoring policy
• What is logged, retention periods, alert ownership
• Acceptable use and endpoint policy
• Use of company devices, Intune compliance, removable media
• Third-party and vendor access policy
• Access for vendors, service providers and counterparties QualificationsRequired
• 3+ years in infrastructure engineering or systems administration, with at least 3 years running production workloads in Microsoft Azure.
• Strong Azure skills across compute, storage, networking, Azure SQL, Key Vault and monitoring.
• Hands-on Microsoft Entra ID and Microsoft 365 administration, including conditional access, MFA and Intune.
• System administration

skills:
Windows Server and Linux configuration, patching, user management and performance tuning.
• Networking

skills:
routing, switching, VPNs, DNS and network performance monitoring.
• Network security

skills:
firewall configuration, access controls, encryption and security best practice.
• Proven experience writing and enforcing IT policies, standards and procedures, including through Azure Policy and RBAC.
• Experience with backup, disaster recovery and Azure Site Recovery.
• Solid troubleshooting skills on complex technical issues. Desirable
• Microsoft certifications such as AZ-104 (Azure Administrator), AZ-305 (Azure Solutions Architect), AZ-500 (Azure Security Engineer) or SC-300 (Identity and Access Administrator).
• Familiarity with security frameworks such as ISO 27001, NIST CSF, CIS Benchmarks or SOC 2. Personal attributes
• Clear written and verbal communication, including documentation for non-technical readers.
• Able to work independently in a remote setting and across time zones.
• Committed to security, reliability and continuous improvement, with a proactive approach to spotting risk.

📌 Infrastructure Engineer (India)
🏢 GraniteShares ETFs
📍 India