出海雷达

Azure Infrastructure Engineer

开发工程限定地区（需当地身份）
公司American Residential Services
薪资未公开
工作地点United States
地域资格限定地区（需当地身份）
时区要求日间重叠约 9 小时，基本正常作息
用工类型Full Time
发布时间今天
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制：该职位明确限定在 United States 招聘。如果你是位于中国大陆的求职者，通常需要当地工作身份才能投递，或需与雇主确认是否接受独立合同（Contractor）形式合作。
关于本页中文：职位描述由本机离线模型翻译，属机器翻译，供快速判断用；正式沟通与投递请以英文原文为准。官方翻译通道恢复后会自动重译升级。

公司名称 ARS-Rescue Rooter 概述 Azure 基础设施工程师是一个实践基础设施角色，设计，构建，迁移，保护和运营生产 Azure 基础架构扩大我们的本地 VMware 和 Windows 数据中心。重点领域：Azure 网络，混合连接，虚拟机和平台服务，灾难恢复和迁徙执行。该角色是 DevOps 熟练的，而不是 DevOps 工程：工程师使用 Infrastructure-as-Code,Git 和管道来保持基础设施可重复性和审计性，遵循并扩展团队标准。工程师与基础设施，网络，安全，数据库和应用开发团队以及外部顾问合作。责任关键责任 Azure 基础设施工程 &运营 ·独立设计，部署和维护 Azure 的基础设施：登陆区，管理组，VM,存储，备份，监控和治理。·解决连接，性能，访问和可用性问题在 VM,OS,网络，DNS,防火墙和身份层；执行根原因分析并实施持久的修复。·制定跑本和操作标准；参与事件响应，变化管理 (CAB),维护窗户和通话中。混合网络，DNS 和应用程序交付 ·设计并解决问题 VNets,NSG,路由/UDR,枢纽或虚拟 WAN,Azure 火墙，VPN 门户端和快速通道，包括 BGP 和故障行为。·在 Azure 和本地 （私人 DNS,DNS 私人解析器，有条件转发）中设计名称分辨率。·使用私人终点实现 PaaS 服务的私人连接。·支持应用程序交换与前门，应用网关，负载平衡以及 WAF,包括 TLS 证书生命周期和失败模式设计当边缘服务或政策失败时。· 网络与防火墙规则，IP 地址，NAT 和数据中心，分支和第三方连接工作。迁移执行 · 计划并执行 VMware 和 Windows 迁移到 Azure:依赖评估，Azure 迁移，升级和转换，测试迁移，切断和后迁移支持。· 生产切割计划，验证检查列表和滚动标准；执行离职生产切除。· 在 SQL 服务器迁移的 Azure 基础设施 （总是上 Azure 管理实例或在 Azure VMs 上的 SQL 服务器）的支持。·维护混合域控制器，DNS 和 AD 集成为 Azure VM.

查看英文原文

Company Name
ARS-Rescue RooterOverview
The Azure Infrastructure Engineer is a hands-on infrastructure role that designs, builds, migrates, secures, and operates production Azure infrastructure extending our on-premises VMware and Windows datacenter. Focus areas: Azure networking, hybrid connectivity, virtual machines and platform services, disaster recovery, and migration execution.
The role is DevOps-savvy, not DevOps engineering: the engineer uses Infrastructure-as-Code, Git, and pipelines to keep infrastructure repeatable and auditable, following and extending team standards.
The engineer partners with Infrastructure, Networking, Security, Database, and Application Development teams and external consultants.
Responsibilities
Key Responsibilities
Azure Infrastructure Engineering & Operations

  • Independently design, deploy, and maintain Azure infrastructure: landing zones, management groups, VMs, storage, backup, monitoring, and governance.
  • Troubleshoot connectivity, performance, access, and availability issues across VM, OS, network, DNS, firewall, and identity layers; perform root-cause analysis and implement durable fixes.
  • Develop runbooks and operational standards; participate in incident response, change management (CAB), maintenance windows, and on-call.

Hybrid Networking, DNS & Application Delivery

  • Design and troubleshoot VNets, NSGs, routing/UDRs, hub-and-spoke or Virtual WAN, Azure Firewall, VPN Gateway, and ExpressRoute, including BGP and failover behavior.
  • Design name resolution across Azure and on-premises (Private DNS, DNS Private Resolver, conditional forwarding).
  • Implement private connectivity to PaaS services using private endpoints.
  • Support application delivery with Front Door, Application Gateway, load balancing, and WAF, including TLS certificate lifecycle and failure-mode design when an edge service or policy fails.
  • Work with Networking on firewall rules, IP addressing, NAT, and datacenter, branch, and third-party connectivity.

Migration Execution

  • Plan and execute VMware and Windows migrations to Azure: dependency assessment, Azure Migrate, lift-and-shift, test migrations, cutover, and post-migration support.
  • Produce cutover plans, validation checklists, and rollback criteria; execute off-hours production cutovers.
  • Support Azure infrastructure for SQL Server migrations (Always On to Azure SQL Managed Instance or SQL Server on Azure VMs).
  • Maintain hybrid domain controllers, DNS, and AD integration for Azure workloads.

Resiliency, Backup & Disaster Recovery

  • Design and test DR using Site Recovery, geo-redundant storage, and region/availability-zone design against RTO and RPO targets.
  • Operate Azure Backup and evaluate it against third-party backup and replication platforms for new Azure data stores; document and report recovery test results.

Platform Services Infrastructure

  • Provide infrastructure for App Service, Functions, Logic Apps, Service Bus, and API Management: VNet integration, private endpoints, identity, Key Vault, and monitoring.
  • Support AKS at the platform level (private cluster, CNI, node pools, ingress, managed identity) with Application Development.

Automation & Infrastructure-as-Code

  • Build, modify, and troubleshoot Terraform following team standards: modules, remote state, environment separation, and drift.
  • Use Git pull requests and code review; maintain Azure DevOps infrastructure pipelines, including approval gates and self-hosted agents reaching private endpoints.
  • Automate operations with PowerShell and Azure CLI.

Identity, Security & Governance

  • Apply Entra ID, RBAC, PIM, Conditional Access, and managed identities to enforce least privilege and segregation of duties.
  • Implement guardrails with Azure Policy, management groups, tagging, and Defender for Cloud.
  • Partner with Security, Compliance, and Audit on PCI DSS, NIST, and CIS controls, remediation, and audit evidence.

Observability & Cost Management

  • Build Azure Monitor and Log Analytics alerts, workbooks, and dashboards; tune alert noise and logging volume; use Application Insights for tracing.
  • Right-size and manage cost with Cost Management, Advisor, reservations, and savings plans, after establishing baselines.

Collaboration & Cross-Training
· Share knowledge both ways: train teammates in Azure and cloud practices, and learn from them in their areas of expertise.
Qualifications
Required Qualifications
Note: Candidates must demonstrate each item below with specific examples of work they performed as an individual contributor.

  • Bachelor's degree in IT, Computer Science, Engineering, or related field; equivalent professional experience considered.
  • 5+ years of enterprise infrastructure engineering, including 3+ years of hands-on production Azure.
  • Hybrid networking: hands-on VNets, NSGs, routing, DNS, and ExpressRoute or site-to-site VPN; can explain tradeoffs and failure behavior.
  • On-premises to Azure migrations: direct involvement in preparation, cutover, rollback planning, and post-migration support.
  • Working knowledge of VMware vSphere, Windows Server, Active Directory, DNS, and Group Policy.
  • Resiliency: Azure Backup and Site Recovery (or equivalent DR design) against RTO/RPO targets.
  • Automation: working proficiency with Terraform (state, modules, environments), PowerShell, Git, and Azure DevOps infrastructure pipelines.
  • Identity and governance: Entra ID, RBAC, least privilege, and Azure Policy.
  • Independent troubleshooting and root-cause analysis of complex Azure issues.
  • Experience supporting PCI DSS, NIST, CIS, or similar compliance requirements.

Technical Skills
Working knowledge

  • Platform services: App Service, Functions, Logic Apps, Service Bus, API Management, Azure SQL Managed Instance, SQL Server on Azure VMs.
  • Azure Virtual Desktop/FSLogix, Bicep/ARM, Defender for Cloud, and Sentinel.
  • AKS, Docker, Helm, and Cosmos DB.

Preferred Qualifications

  • Azure certifications (AZ-104, AZ-305, AZ-700, AZ-500, AZ-400) or HashiCorp Terraform Associate; must be current.
  • AKS platform operations, Azure SQL Managed Instance, or IIS/.NET application migrations.
  • PCI DSS audit evidence, CrowdStrike or similar security platforms, and multi-site hybrid environments.
  • Experience mentoring peers and using AI tools to speed scripting and troubleshooting.

Work Details

  • Remote; work day would be in Central Time Zone.
  • Regular business hours with scheduled after-hours maintenance and cutovers, occasional incident response, and on-call as required; participation in change management (CAB).
  • Occasional travel for project work, meetings, or datacenter activities.

Originally posted on Himalayas

本页面信息整理自 Himalayas，版权归原发布方所有。职位可能随时关闭，投递请以原始页面为准。 本站只做信息聚合展示，不参与招聘流程，也不向求职者收取任何费用。

← 返回全部职位