Azure and infrastructure operations

Operate, maintain and improve Microsoft Azure infrastructure services and on-premises Windows and Linux server platforms.
Administer Azure Virtual Machines, availability zones and sets, virtual networks, storage, load balancing and supporting platform services.
Perform sizing, configuration, patching, upgrades, lifecycle management and decommissioning across hybrid infrastructure.
Monitor availability, capacity, performance and platform health; take preventive action before service quality is affected.
Plan and execute infrastructure migrations, modernisation activities and technical service improvements.

Hybrid cloud and connectivity

Engineer and support Azure virtual networks, subnets, routing, private connectivity, network security groups and hybrid connectivity.
Support VPN and ExpressRoute services and troubleshoot connectivity between Azure, on-premises environments and business sites.
Maintain DNS, DHCP, name resolution and related core infrastructure services.
Work with network and security specialists to ensure secure and resilient communication across the hybrid environment.
Contribute to landing zones, hub-and-spoke designs and standard patterns for scalable Azure delivery.

Identity and access

Administer Active Directory, Microsoft Entra ID, group policies and hybrid identity services.
Maintain Microsoft Entra Connect and support identity synchronisation, authentication and access-related troubleshooting.
Implement role-based access control, Privileged Identity Management and least-privilege administration.
Support single sign-on, multifactor authentication, Conditional Access and access-governance requirements.
Ensure privileged access and infrastructure changes are approved, traceable and regularly reviewed.

Security, compliance and resilience

Apply security baselines, operating-system hardening, encryption, endpoint protection and vulnerability remediation.
Monitor relevant security alerts, platform logs and configuration risks and support incident investigation and remediation.
Maintain certificates and key infrastructure controls in accordance with approved standards.
Provide audit evidence and correct identified control or compliance gaps.
Partner with Information Security to embed security-by-design in infrastructure solutions and changes.

Backup, recovery and continuity

Configure and maintain Azure and on-premises backup, retention and recovery services.
Perform scheduled restore tests and document evidence that systems and data are recoverable.
Implement and maintain disaster-recovery arrangements for critical infrastructure services.
Maintain recovery procedures, dependencies, ownership and operational runbooks.
Support business-continuity and disaster-recovery exercises and close identified improvement actions.

Storage, virtualisation and platform services

Operate Azure storage services and on-premises SAN, NAS and file services.
Monitor storage capacity, performance, growth and availability and recommend preventive improvements.
Administer permissions, quotas and secure access to infrastructure-managed storage services.
Support VMware, Hyper-V or comparable virtualisation platforms where used by Piab.
Maintain physical-server firmware, storage, clustering and hardware lifecycle activities where applicable.

Monitoring, incidents and service management

Use Azure Monitor, PRTG, system logs and other approved tools to provide proactive monitoring and actionable alerting.
Own and resolve Azure and infrastructure incidents, service requests, problems and changes in the IT service management platform.
Perform root-cause analysis for recurring incidents and drive corrective and preventive actions through to closure.
Coordinate technical escalations with Microsoft, service providers and technology vendors.
Ensure changes include risk assessment, testing, rollback planning, stakeholder communication and post-change validation.

Automation, governance and cost optimisation

Automate repeatable infrastructure tasks using PowerShell, Bicep, Terraform, Azure automation or approved equivalent tooling.
Improve consistency through infrastructure-as-code, standard templates, policy and configuration validation.
Monitor Azure consumption, identify unused or underutilised resources and recommend right-sizing or scaling actions.
Maintain tagging, ownership and governance controls that support cost transparency and lifecycle management.
Prepare evidence-based cost, capacity and optimisation recommendations for IT Operations leadership.

Documentation and collaboration

Maintain current architecture diagrams, inventories, configuration records, runbooks, support procedures and recovery documentation.
Ensure operational handovers include ownership, monitoring, support model, dependencies and acceptance criteria.
Work effectively with Service Desk, Security, network, application and business teams across countries and time zones.
Share knowledge, support technical development across IT Operations and provide clear guidance to colleagues.
Challenge service providers constructively and maintain clear accountability for delivery, quality and follow-up.

Required experience and skills

Proven hands-on experience operating Microsoft Azure and hybrid infrastructure in a business-critical environment.
Strong practical experience with Azure Virtual Machines, networking, storage, security, monitoring, backup and recovery.
Experience administering Windows Server and working knowledge of Linux server environments.
Practical knowledge of Active Directory, Microsoft Entra ID, hybrid identity, RBAC, PIM, MFA and Conditional Access.
Experience with Azure virtual networks, VPN, ExpressRoute, DNS, routing, network security groups and load balancing.
Experience with virtualisation, enterprise storage, backup and disaster-recovery technologies.
Ability to diagnose complex platform, performance, connectivity and authentication issues methodically.
Experience with ITIL-aligned incident, problem, change, request and configuration-management processes.
Clear professional English and the ability to collaborate across countries, cultures, suppliers and time zones.

Preferred qualifications

Bachelor's degree in information technology, computer science, engineering or equivalent practical experience.
Microsoft Azure certifications such as AZ-104, AZ-305 or AZ-700; AZ-900 is considered foundational.
Experience with PowerShell, Bicep, Terraform, ARM templates or other infrastructure-as-code approaches.
Experience with Azure landing zones, Azure Policy, Defender for Cloud, cost management and hybrid-cloud governance.
Relevant VMware, Windows Server, Linux, backup, security or ITIL certifications.

Accountability and decision expectations

Take end-to-end ownership of assigned Azure and infrastructure work, including follow-up, communication and documented closure.
Escalate material availability, security, capacity, cost and supplier risks early, with evidence and a recommended action.
Do not implement production changes without required approval, testing and rollback readiness.
Balance reliability, security, performance, cost and speed using Piab standards and approved governance.

Act as a trusted technical partner while maintaining clear global standards and documented exceptions.

Success measures

Stable, secure and well-performing Azure and on-premises infrastructure services.
Reduced incident recurrence and restoration time through monitoring, root-cause analysis and preventive improvement.
Backup, restore and disaster-recovery controls are tested, documented and evidenced.
Infrastructure patches, vulnerabilities and security findings are handled within agreed priorities.
Azure resources are appropriately governed, tagged, right-sized and cost-transparent.
Changes and migrations are delivered safely with complete documentation and operational handover.
Architecture diagrams, inventories, configuration records and runbooks remain accurate and current.

Key interfaces

Head of IT Operations and the Global IT Operations team.
Information Security, Service Desk, Network, EUC and application teams.
Piab business sites and technical stakeholders.
Microsoft, managed-service providers and infrastructure technology partners.

Azure Cloud & Infrastructure Engineer

About the role

Skills

Full job details