ForeFlight
Responsibilities
Design, deploy, and manage core Azure services within the Landing Zones, including networking (VNets, VPNs, ExpressRoute), identity (Azure AD, AAD DS), security (Azure Firewall, NSGs, Azure Security Center), and foundational compute/storage.
Develop, maintain, and version control Infrastructure-as-Code scripts using Terraform or Bicep to ensure consistent, repeatable, and automated provisioning of all cloud resources.
Implement and enforce cloud governance controls via Azure Policy, blueprints, and resource tagging strategies to maintain security, cost management, and compliance standards across all subscriptions.
Automate operational tasks, monitoring, alerting, and security remediation using tools like Azure Automation, PowerShell, and Azure DevOps pipelines (CI/CD).
Monitor the performance, cost, and health of the Azure environment. Perform maintenance, patching, and optimization activities to ensure operational excellence.
Ensure all cloud deployments adhere to security baselines. Implement and manage security services such as Key Vault, Azure Monitor, and Azure Sentinel.
Create and maintain comprehensive documentation for the Azure Landing Zone architecture, deployment processes, operational runbooks, and troubleshooting guides.
Collaborate with application development, security, network, and compliance teams to ensure the cloud infrastructure meets their requirements and facilitates their objectives.
Required Qualifications
Experience: Minimum of 7-10 years of professional experience with Microsoft Azure, specifically in an engineering or operations role.
Azure Core Services: Deep, hands-on expertise with core Azure IaaS/PaaS services (Compute, Storage, Networking, Identity, and Security).
IaC Proficiency: Strong proficiency in at least one major Infrastructure-as-Code tool, preferably Terraform or Bicep/ARM Templates.
Scripting & Automation: Excellent scripting skills in PowerShell and experience with Azure CLI.
CI/CD: Experience utilizing Azure DevOps (or similar tools like GitHub Actions) for continuous integration and continuous delivery of infrastructure.
Networking: Understanding of cloud networking concepts, including VNet peering, routing, VPNs, load balancing, and DNS.
Security: Practical experience implementing security best practices and using native Azure security tools (e.g., Azure Policy, NSGs, Azure Firewall).
Preferred Qualifications
Certification: Current Microsoft Certified: Azure Administrator Associate (AZ-104) or Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
Monitoring: Experience with Azure Monitor, Log Analytics, and designing custom dashboards and alerts.
Containers: Familiarity with container technologies like Docker and Kubernetes (AKS).
DevOps Culture: A strong commitment to a DevOps philosophy, including SRE principles, collaborative problem-solving, and continuous improvement.
Jeppesen ForeFlight – EOE including Disability/Vets | Pay Transparency | E-Verify Participant.
#J-18808-Ljbffr
Design, deploy, and manage core Azure services within the Landing Zones, including networking (VNets, VPNs, ExpressRoute), identity (Azure AD, AAD DS), security (Azure Firewall, NSGs, Azure Security Center), and foundational compute/storage.
Develop, maintain, and version control Infrastructure-as-Code scripts using Terraform or Bicep to ensure consistent, repeatable, and automated provisioning of all cloud resources.
Implement and enforce cloud governance controls via Azure Policy, blueprints, and resource tagging strategies to maintain security, cost management, and compliance standards across all subscriptions.
Automate operational tasks, monitoring, alerting, and security remediation using tools like Azure Automation, PowerShell, and Azure DevOps pipelines (CI/CD).
Monitor the performance, cost, and health of the Azure environment. Perform maintenance, patching, and optimization activities to ensure operational excellence.
Ensure all cloud deployments adhere to security baselines. Implement and manage security services such as Key Vault, Azure Monitor, and Azure Sentinel.
Create and maintain comprehensive documentation for the Azure Landing Zone architecture, deployment processes, operational runbooks, and troubleshooting guides.
Collaborate with application development, security, network, and compliance teams to ensure the cloud infrastructure meets their requirements and facilitates their objectives.
Required Qualifications
Experience: Minimum of 7-10 years of professional experience with Microsoft Azure, specifically in an engineering or operations role.
Azure Core Services: Deep, hands-on expertise with core Azure IaaS/PaaS services (Compute, Storage, Networking, Identity, and Security).
IaC Proficiency: Strong proficiency in at least one major Infrastructure-as-Code tool, preferably Terraform or Bicep/ARM Templates.
Scripting & Automation: Excellent scripting skills in PowerShell and experience with Azure CLI.
CI/CD: Experience utilizing Azure DevOps (or similar tools like GitHub Actions) for continuous integration and continuous delivery of infrastructure.
Networking: Understanding of cloud networking concepts, including VNet peering, routing, VPNs, load balancing, and DNS.
Security: Practical experience implementing security best practices and using native Azure security tools (e.g., Azure Policy, NSGs, Azure Firewall).
Preferred Qualifications
Certification: Current Microsoft Certified: Azure Administrator Associate (AZ-104) or Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
Monitoring: Experience with Azure Monitor, Log Analytics, and designing custom dashboards and alerts.
Containers: Familiarity with container technologies like Docker and Kubernetes (AKS).
DevOps Culture: A strong commitment to a DevOps philosophy, including SRE principles, collaborative problem-solving, and continuous improvement.
Jeppesen ForeFlight – EOE including Disability/Vets | Pay Transparency | E-Verify Participant.
#J-18808-Ljbffr