Klik.Solutions

Infrastructure Engineer

• Design, deploy, and manage Azure environments including subscriptions, resource groups, VNets, subnets, NSGs, and route tables.
• Build and maintain Azure Virtual Desktop (AVD), Windows 365 Cloud PC, and Azure Virtual Machines.
• Architect and manage Azure networking: VNet Peering, ExpressRoute, Azure VPN Gateway (including P2S and S2S with Entra ID auth), and Private Endpoints.
• Configure and manage Azure Load Balancers, Application Gateways, Azure Firewall, and Front Door.
• Implement and manage Azure Storage (Blob, File, Table, Queue) and Azure Backup / Azure Site Recovery.
• Work with Azure Monitor, Log Analytics, and Defender for Cloud to ensure operational visibility and security posture.
• Administer Microsoft Entra ID (Azure AD): users, groups, roles, Conditional Access, MFA, and PIM.
• Manage hybrid identity: AD Connect, password hash sync, seamless SSO, and Entra ID join scenarios.
• Configure enterprise app registrations, OAuth/OIDC integrations, and admin consent policies.
• Implement and enforce RBAC across Azure subscriptions and resource scopes.
• Support Microsoft 365 tenant administration including Exchange Online, SharePoint, and Teams governance.
• Design and support site-to-site connectivity (IPsec, WireGuard, SD-WAN) between on-prem and Azure.
• Configure routing, switching, VLANs, trunking, and network segmentation on Fortinet, Cisco/Meraki, and OPNsense platforms.
• Manage DNS (split-brain, Azure Private DNS Zones), DHCP, and certificate services in hybrid environments.
• Troubleshoot complex hybrid networking issues: MTU mismatches, asymmetric routing, latency, and firewall policy conflicts.
• Support UniFi and enterprise wireless infrastructure in conjunction with WAN and cloud connectivity.
• Administer Windows Server and Linux environments (on-prem and IaaS).
• Manage virtualization platforms: VMware, Hyper-V, XCP-ng, or equivalent.
• Handle VM lifecycle: provisioning, migrations (including cloud lift-and-shift), snapshots, and capacity planning.
• Support shared storage platforms: SAN, NAS, NFS, iSCSI, and Azure File Sync.
• Manage on-prem Active Directory, Group Policy, and directory-integrated services alongside Entra ID.
• Lead and execute cloud migration projects including M365 tenant consolidations, email migrations (MigrationWiz/BitTitan), and infrastructure lift-and-shift.
• Build and maintain Infrastructure as Code (IaC) using Bicep, ARM templates, or Terraform for repeatable deployments.
• Automate operational tasks using PowerShell, Azure CLI, and Logic Apps/Automation Runbooks.
• Participate in client onboarding, scoping, and technical discovery for cloud transformation engagements.
• Implement and manage Azure security controls: Defender for Cloud, Defender for Endpoint, Sentinel (SIEM), and Key Vault.
• Perform vulnerability remediation, security hardening, and patch management across cloud and hybrid workloads.
• Respond to security incidents in coordination with SOC and security teams.
• Provide Tier 3 escalation support for cloud and hybrid infrastructure incidents.
• Maintain and respond to Azure Monitor alerts, Log Analytics queries, and Defender recommendations.
• Participate in on-call rotations and critical incident response.
• Collaborate with Field Services, NOC, Help Desk, and Project teams on complex cross-functional issues.
• Identify recurring patterns and recommend architectural improvements or automation to prevent recurrence.
• Maintain accurate Azure architecture diagrams, runbooks, and configuration documentation.
• Document incident resolutions, post-mortems, and lessons learned.
• Contribute to and enforce cloud governance standards, naming conventions, tagging policies, and change management practices.
• Develop and maintain SOPs for repeatable cloud deployment and management tasks.

Azure Infrastructure Engineer