Core Responsibilities:

1. General Azure L3 Responsibilities (Design, Governance, and Support)

Provide advanced L3 support and engineering for core Azure IaaS and PaaS resources (VMs, Storage, Networking, Backups, Azure DR), serving as the escalation point for complex incidents.

Must have: Conduct security and configuration audits on Azure infrastructure using industry standards such as CIS Benchmarks and internal compliance frameworks.

Manage a complex multi-tenant Azure environment, overseeing cross-tenant permissions, service connections, and resource governance.

Administer and audit Azure licensing (Microsoft 365, Windows 365, etc.) to ensure cost efficiency and compliance across all tenants.

Implement and manage Azure Cost Management policies and reservations, identifying opportunities to optimize IaaS spend.

Maintain and enhance the security posture, ensuring alignment with industry best practices.

Preferable: Manage and troubleshoot the operational health and connectivity of core Azure PaaS data services, including Azure SQL Database, Azure Data Factory (ADF) pipelines, and the underlying Azure Databricks infrastructure.

2. Networking, Security & Access

Configure, manage, and troubleshoot advanced Azure networking components, including Application Gateways (with WAF policies), NSGs, Load Balancers, and VNet Peering.

Administer the full SSL certificate lifecycle — procurement, deployment, binding, and renewal — across Azure services.

Configure and troubleshoot Azure Application Proxy to securely publish internal websites and applications for external access.

Design and implement secure methods for external application accessibility, ensuring high availability and robust security posture.

3. Modern Endpoint & Hybrid Identity

Serve as the SME and administrator for Azure Virtual Desktop (AVD) and Cloud PC (Windows 365) infrastructure.

Implement and manage Cloud PC optimization strategies using Entra ID / Hybrid Identity for enhanced user experience and resource utilization.

Oversee image and application management for VDI solutions, ensuring golden images are patched, secured, and efficiently distributed.

Perform expert-level Intune policy administration (Microsoft Endpoint Manager) to enforce security baselines, compliance policies, and application deployments across managed endpoints.

4. Cross-Platform & Operations

Perform advanced Linux troubleshooting and administration, including patching and maintenance of Azure IaaS virtual machines.

Administer Self-Hosted Integration Runtime (SHIR), managing data gateways and hybrid data connections.

Responsible for image creation and maintenance for IaaS deployments (VM templates / Managed Images).

Implement and maintain Application Performance Monitoring (APM) using SolarWinds or similar enterprise-grade tools.

Manage remote monitoring and administration using tools like NinjaRMM.

Preferred Certifications

Microsoft Certified: Azure Administrator Associate (AZ-104)

Microsoft Certified: Azure Solutions Architect Expert (AZ-305)

Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)

Experience & Soft Skills

Minimum 8+ years of experience in Azure infrastructure

Strong troubleshooting, documentation, and stakeholder communication skills

Ability to work independently and collaborate effectively with cross-functional teams