Location
- Bangalore/Chennai Mode of work
- WFO YOE
- 5Years+ Notice period
- Immediate to 30days Role Overview We are looking for an experienced Infrastructure Developer to design, automate, and maintain enterprise-grade cloud environments on Microsoft Azure. In this role, you will bridge the gap between software development and systems engineering by building resilient, self-healing Infrastructure as Code (IaC). You will be directly responsible for establishing robust security baselines using Microsoft Defender for Cloud (Azure Defender), implementing granular Network RBAC and segmentation policies, and driving full lifecycle deployment automation across all cloud environments.

Key Responsibilities
• Cloud Infrastructure Architecture & Provisioning: Design, build, and maintain highly available, scalable Azure cloud infrastructure using Infrastructure as Code (IaC) principles to eliminate manual provisioning and configuration drift.
• Security & Threat Mitigation (Azure Defender): Configure, tune, and manage Microsoft Defender for Cloud (Azure Defender) across compute, storage, databases, and container workloads. Continuously monitor Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWPP), remediating findings and enforcing compliance benchmarks.
• Network RBAC & Access Engineering: Design and enforce least-privilege access models using Azure Role-Based Access Control (RBAC), Azure AD/Entra ID, and Privileged Identity Management (PIM). Implement network segmentation, Network Security Groups (NSGs), Application Security Groups (ASGs), Route Tables, and Azure Firewall policies to govern east-west and north-south traffic securely.
• End-to-End Automation: Build, optimize, and maintain CI/CD pipelines (e.g., GitLab CI) to automate infrastructure provisioning, configuration management, application deployment, and compliance testing.
• Container Orchestration & Platform Engineering: Deploy, manage, and harden container ecosystems (primarily Azure Kubernetes Service
- AKS) with a focus on network policies, private clusters, and container image vulnerability scanning via Defender for Containers.
• Observability as Code: Define and implement monitoring, logging,



and alerting frameworks across hybrid/cloud workloads using Azure Monitor, Log Analytics (KQL), Prometheus, and Grafana to proactively detect degradation and auto-remediate known failure modes.
• Architectural Hardening & Reliability: Act as the Tier-3 escalation authority for critical infrastructure and network incidents. Participate in postmortems and convert root-cause findings into automated preventative controls and resilient architectural improvements.
• Technical Standards & Blueprints: Author reusable IaC modules, technical architecture diagrams, and operational engineering standards for development and operations teams.
• Must-Have

Requirements:
• Azure Cloud Architecture & Core Networking: 5+ years of hands-on experience provisioning and supporting Azure environments, including Virtual Networks (VNets), subnets, Route Tables (UDRs), peering, Private Endpoints, and private DNS zones.
• Security & Azure Defender: Practical experience deploying, configuring, and tuning Microsoft Defender for Cloud (Azure Defender) across servers, storage, databases, and container workloads, including CSPM posture tuning and CWPP threat alert remediation.
• Network RBAC & Identity Governance: Robust expertise in designing and enforcing least-privilege access using Azure Role-Based Access Control (RBAC), custom role definitions, scope hierarchies (Management Groups down to Resource Groups), and Entra ID/Azure AD controls.
• GitLab CI/CD Pipeline Automation: Production experience building, optimizing, and maintaining automated CI/CD pipelines using GitLab CI/CD for infrastructure provisioning, container image builds, and application releases.
• PostgreSQL Database Optimization & Operations: Proven experience administering and tuning Azure Database for PostgreSQL (Flexible Server), including query performance tuning,



index optimization, connection pooling (PgBouncer), compute/storage IOPS sizing, high-availability setups, and automated backup/recovery.
• Infrastructure Upgrades & Patching: Hands-on experience planning and executing zero-downtime platform upgrades, OS patching, database version upgrades, TLS certificate rotations, and runtime deprecation cycles.
• Infrastructure as Code (IaC) & Scripting: Strong proficiency writing modular, production-ready code in Terraform or Bicep/ARM, paired with scripting skills in Bash or Python to automate administrative operations.
• Containerization: Hands-on experience managing and securing containerized workloads, with a focus on Azure Kubernetes Service (AKS), node pool lifecycle management, and container security.
• Stakeholder Engagement & Communication: Track record of communicating infrastructure requirements clearly to both technical teams and client/executive stakeholders, including leading architectural reviews and post-incident reviews.
• Should-Have

Requirements:
• Azure Landing Zones: Familiarity with the Microsoft Cloud Adoption Framework (CAF) and experience architecting enterprise-scale Landing Zones with scalable management group structures and policy-driven governance.
• Azure Virtual WAN (vWAN): Working knowledge of architecting and operating large-scale transit networks using Azure Virtual WAN to connect distributed spokes, VPNs, and ExpressRoute circuits.
• Azure Firewall & Perimeter Defense: Experience managing native network security appliances, including Azure Firewall (Standard/Premium), Firewall Manager policies, and Application Gateway / Web Application Firewall (WAF) rule sets.
• Regulatory Compliance Frameworks: Experience enforcing and auditing security baselines against industry frameworks (e.g., CIS Azure Benchmarks, NIST SP 800-53, ISO 27001, SOC 2) using Azure Policy and Defender compliance dashboards.
• Third-Party Observability: Experience instrumenting hybrid observability platforms (e.g., Datadog, Prometheus/Grafana, Splunk) alongside Azure Monitor and Log Analytics (KQL) for distributed tracing and alerting.

📌 Azure Infrastructure Engineer (India)
🏢 CoffeeBeans
📍 India