Key Responsibilities
Assess the existing Azure tenant and overall cloud architecture and identify prospects for architecture and security optimisation.
Review and improve Azure Landing Zone implementation and alignment to architecture best practices. The discussion indicated that landing-zone practices are currently present only in parts of the workplace.
Review Azure security across multiple layers, including:
Azure entry/network layer security
Application/service security
Service principals and associated access
Public exposure of Azure resources
Privileged access
Security alerts and rules
Review network architecture, segmentation and security rules and identify improvements.
Provide architecture guidance and hands-on troubleshooting for complex L3/L4 Azure issues.
Review Azure services and configurations against appropriate architecture and security best practices and recommend improvements.
Provide architecture oversight for commonly used Azure services, including:
Azure App Service
Azure SQL services
Azure Storage Accounts
Azure networking components
Support Infrastructure as Code (IaC) approaches for managing Azure resources. Terraform was specifically discussed as acceptable, although the client does not mandate a single IaC technology.
Take ownership of Azure-related technical problems, rapidly identify root causes and drive issues towards resolution.
Work closely with the client's technical teams and provide architecture-level guidance while remaining capable of hands-on implementation.