12302 - Azure Infrastructure & Security

Job Description

NO 3rd Party Agencies

\n

NO Sponsorship

\n

Role is FULLY ONSITE in Delray Beach, Florida.

\n

\n

Azure Infrastructure & Security Specialist. You will own the security, reliability and cost of our Azure environment, lead the move of our SQL Server workloads to Azure SQL Managed Instance, and turn a solid start on cloud hardening into a well-run, standards-based platform. You will have real ownership, direct access to the Information Technology Manager, and work that shows up in day-to-day operations right away.

\n

What you'll do

\n

\n
• Stand up Azure SQL Managed Instance. Size and license it, build it on private networking, migrate on-premises SQL Server databases with clean cutovers, and set up high availability and disaster recovery that you test.
\n
• Run our Azure SQL platform. Administer Azure SQL servers and databases: access, firewall and private endpoints, auditing, encryption, backups and performance.
\n
• Own identity and access. Run Microsoft Entra ID, Azure RBAC and Privileged Identity Management; move every workload to least-privilege access instead of shared credentials.
\n
• Secure the network. Design VNet-integrated environments, Private Endpoints and private DNS; extend Azure Front Door and WAF protection across the environment.
\n
• Protect secrets and data. Keep every credential in Key Vault with scheduled rotation; safeguard sensitive business and employee data.
\n
• Detect and respond. Run Microsoft Defender for Cloud and Azure Monitor alerting; write and rehearse our incident response runbook.
\n
• Make it reliable and repeatable. Codify infrastructure in Bicep or Terraform, manage the Azure VMs that support our data platform, and remove single points of failure in our daily data loads.
\n
• Set the standard. Write our Azure infrastructure security standard, apply Azure Policy and tagging, track cloud spend, and report monthly to the Information Technology Manager.
\n

\n

Application development, application change management and in-app security stay with our development team; you will partner closely with them.

\n

What you bring

\n

\n
• 5+ years in cloud infrastructure or security engineering, including 3+ years hands-on with Microsoft Azure in production.
\n
• Hands-on Azure SQL Managed Instance experience: deployment, networking, migration from on-premises SQL Server and failover groups.
\n
• Azure SQL administration and security: logins and roles, firewall rules, auditing, TDE, backup and restore; comfortable in T-SQL.
\n
• Azure networking depth: VNets, subnet delegation, Private Endpoints, private DNS, NSGs, NAT gateway.
\n
• Microsoft Entra ID, Azure RBAC, Conditional Access and MFA.
\n
• Key Vault and secrets management, including rotation without downtime.
\n
• Azure VMs and container platforms (Azure Container Apps, AKS or similar).
\n
• Infrastructure as code with Bicep, ARM or Terraform; fluent in Azure CLI and PowerShell.
\n
• Defender for Cloud, Azure Monitor and Log Analytics (KQL).
\n
• Clear writing and a careful, staged approach to changing live systems.
\n

\n

Nice to have

\n

\n
• AZ-500, DP-300, AZ-104 or AZ-305 certification; SC-300 or CISSP a plus.
\n
• Large SQL Server migrations to Azure with near-zero downtime.
\n
• Azure Front Door and WAF tuning.
\n
• Azure Data Factory, self-hosted integration runtimes, VPN or ExpressRoute.
\n
• NIST CSF, CIS Azure Benchmark or SOC 2 controls.
\n
• Experience in distribution, manufacturing or another operations-heavy business.
\n

\n