Cloud Engineer – Unix Azure (IGT1)

Colombo - Sri Lanka

Monthly Salary: Not Disclosed

Posted on: 19 hours ago

Vacancies: 1 Vacancy

Job Summary

The Cloud Engineer Azure focuses on the deployment operation and troubleshooting of Azure cloud services with a strong emphasis on Unix/Linux systems and networking. You will build and support secure resilient connectivity and platform services covering VNets routing private access load balancing and hybrid connectivity (VPN/ExpressRoute) while partnering with SRE Security Engineering Product Support and customer teams across US/UK/APAC time zones. Success requires handson Azure depth Linux administration IaC automation and crisp incident handling in a 247 environment.

Key Responsibilities

Provision configure and operate Azure resources: VMs/VMSS (Linux) VNets/Subnets NSGs/ASGs UDRs/route tables Private Link/Private Endpoints Application Gateway Azure Load Balancer Azure Firewall Bastion Azure DNS Storage.
Implement hybrid connectivity patterns: sitetosite VPN (IPsec/IKEv2) ExpressRoute vWAN and hubandspoke designs.
Apply RBAC Managed Identities and Key Vault for secrets and certificate lifecycle.

Build and maintain infrastructure using Terraform (azurerm) and/or Bicep with Azure CLI and Gitbased workflows.
Write or extend Bash/Python scripts to automate builds validations patching and operational checks; contribute to reusable modules/patterns in CI/CD.

Monitor health with Azure Monitor Log Analytics/KQL Application Insights and Network Watcher (Connection Monitor NSG flow logs packet capture).
Perform deep troubleshooting across Linux OS networking (routing/NAT/DNS/TLS) private connectivity load balancing and platform services; create clear diagnostics and timelines.

Coordinate maintenance windows patching and compliance activities; maintain auditable SOPs/runbooks/diagrams and follow change/incident/problem processes.

Work directly with customer IT/network teams to plan connectivity (VPN/ExpressRoute) execute cutovers and resolve issues; communicate tradeoffs clearly.
Collaborate with SRE/Engineering to improve observability resiliency and cost efficiency; assist Support with Azure/networkcentric cases.

Participate in the global oncall rotation for P1/P2 incidents; ensure accurate ticket hygiene and clean shift handoffs.
Contribute to postincident reviews knowledge base updates and continuous improvement initiatives.

Qualifications :

Required Qualifications

2-3 years in Cloud Engineering/Operations DevOps or SRE roles supporting production systems.
Handson Azure experience across compute networking identity and platform services (VM/VMSS VNet NSG/ASG Route tables Private Link/PE App Gateway/LB Firewall DNS).
Strong Unix/Linux administration (system services networking security hardening performance tuning logs).
Solid networking fundamentals: TCP/IP routing (static/BGP) NAT ACLs/firewalls DNS TLS/PKI IPsec; packet analysis (e.g. tcpdump Wireshark).
Proficiency with Terraform/Bicep Azure CLI and Bash/Python; Git and change control discipline.
Experience in followthesun/247 environments with oncall participation.
Excellent written and verbal communication for global and customerfacing work.

Preferred Qualifications

Certifications (one or more): AZ104 (Administrator) AZ700 (Network Engineer) AZ305 (Solutions Architect) Linux (RHCSA/RHCE) HashiCorp Terraform Associate CCNA/CCNP.
Familiarity with AKS NGINX/Ingress Ansible and container networking concepts.
Exposure to SIEM/EDR/Defender for Cloud and incident response workflows.
Experience with enterprise healthcare SaaS or integration engines is a plus.

Shift & OnCall Expectations

Assigned shift aligned with global operations; occasional adjustments for maintenance/projects.
Participation in rotational oncall for P1/P2 events per local policy (comp/timeinlieu as applicable).
Precise handoffs and status updates at shift boundaries.

Education

College degree in Computer Science Information Technology or a closely related field preferred
Demonstrated relevant experience may be substituted for a degree
Azure certifications preferred (e.g. AZ104 AZ700 AZ305)

Additional Information :

We champion flexibility and hybrid work options to support varying lifestyles and personal needs. At the same time we value the power of in-person collaboration to build community spark innovation and strengthen connections. Our approach ensures you can work in ways that suit you best while still engaging with colleagues to share ideas and grow together. #LI-Hybrid #LI-DNP

Remote Work :

Employment Type :

Full-time

The Cloud Engineer Azure focuses on the deployment operation and troubleshooting of Azure cloud services with a strong emphasis on Unix/Linux systems and networking. You will build and support secure resilient connectivity and platform services covering VNets routing private access load balancing a...

Key Responsibilities

Provision configure and operate Azure resources: VMs/VMSS (Linux) VNets/Subnets NSGs/ASGs UDRs/route tables Private Link/Private Endpoints Application Gateway Azure Load Balancer Azure Firewall Bastion Azure DNS Storage.
Implement hybrid connectivity patterns: sitetosite VPN (IPsec/IKEv2) ExpressRoute vWAN and hubandspoke designs.
Apply RBAC Managed Identities and Key Vault for secrets and certificate lifecycle.

Build and maintain infrastructure using Terraform (azurerm) and/or Bicep with Azure CLI and Gitbased workflows.
Write or extend Bash/Python scripts to automate builds validations patching and operational checks; contribute to reusable modules/patterns in CI/CD.

Monitor health with Azure Monitor Log Analytics/KQL Application Insights and Network Watcher (Connection Monitor NSG flow logs packet capture).
Perform deep troubleshooting across Linux OS networking (routing/NAT/DNS/TLS) private connectivity load balancing and platform services; create clear diagnostics and timelines.

Coordinate maintenance windows patching and compliance activities; maintain auditable SOPs/runbooks/diagrams and follow change/incident/problem processes.

Work directly with customer IT/network teams to plan connectivity (VPN/ExpressRoute) execute cutovers and resolve issues; communicate tradeoffs clearly.
Collaborate with SRE/Engineering to improve observability resiliency and cost efficiency; assist Support with Azure/networkcentric cases.

Participate in the global oncall rotation for P1/P2 incidents; ensure accurate ticket hygiene and clean shift handoffs.
Contribute to postincident reviews knowledge base updates and continuous improvement initiatives.

Qualifications :

Required Qualifications

2-3 years in Cloud Engineering/Operations DevOps or SRE roles supporting production systems.
Handson Azure experience across compute networking identity and platform services (VM/VMSS VNet NSG/ASG Route tables Private Link/PE App Gateway/LB Firewall DNS).
Strong Unix/Linux administration (system services networking security hardening performance tuning logs).
Solid networking fundamentals: TCP/IP routing (static/BGP) NAT ACLs/firewalls DNS TLS/PKI IPsec; packet analysis (e.g. tcpdump Wireshark).
Proficiency with Terraform/Bicep Azure CLI and Bash/Python; Git and change control discipline.
Experience in followthesun/247 environments with oncall participation.
Excellent written and verbal communication for global and customerfacing work.

Preferred Qualifications

Certifications (one or more): AZ104 (Administrator) AZ700 (Network Engineer) AZ305 (Solutions Architect) Linux (RHCSA/RHCE) HashiCorp Terraform Associate CCNA/CCNP.
Familiarity with AKS NGINX/Ingress Ansible and container networking concepts.
Exposure to SIEM/EDR/Defender for Cloud and incident response workflows.
Experience with enterprise healthcare SaaS or integration engines is a plus.

Shift & OnCall Expectations

Assigned shift aligned with global operations; occasional adjustments for maintenance/projects.
Participation in rotational oncall for P1/P2 events per local policy (comp/timeinlieu as applicable).
Precise handoffs and status updates at shift boundaries.

Education

College degree in Computer Science Information Technology or a closely related field preferred
Demonstrated relevant experience may be substituted for a degree
Azure certifications preferred (e.g. AZ104 AZ700 AZ305)

Additional Information :

Remote Work :

Employment Type :

Full-time

Key Skills

Data Center Experience
VMware
NFS
Solaris
Linux
Perl
SAN
Shell Scripting
Chef
openSUSE
Puppet
Oracle

Apply Now

About Company

IFS

We are growing! At IFS we are constantly growing to deliver award-winning solutions to hundreds of partners and thousands of customers worldwide! We help companies who want to be their best when it matters most at their #momentofservice. Visit https://ifs.link/IzM0px to find out mo ... View more

View Profile View Profile

AI AutoApply

Apply to 100+ jobs with one click