AzureInfrastructure&DataEngineer

# **About the Role:** **Grade Level (for internal use):** 09 **The Role:** Design, build, and operate secure, scalable Azure infrastructure that underpins application, data, and AI workloads alongside Design, build, and operate modern data platforms on Azure that enable analytics, reporting, and AI/ML workloads. This role is typically accountable for the Azure landing zone, networking, identity, security baseline, and reliability and will focus on data ingestion, transformation, modelling, and performance. **Responsibilities include:** * Design and operate **Azure landing zones** aligned to CAF and enterprise governance standards * Build and manage **Azure networking** (VNETs, peering, VPN/ExpressRoute, Private Endpoints, DNS) * Implement and manage **identity and access** using Entra ID, RBAC, PIM, and Conditional Access * Own **compute and platform services** (VMs, VMSS, AKS, App Service environments) * Implement **infrastructure as code** using Bicep, ARM, Terraform, or similar * Monitor and optimize **availability, performance, and cost** (Azure Monitor, Log Analytics, Cost Management) * Partner with security teams on **policy, compliance, and threat protection** * Support production workloads with clear **SRE/operations discipline** (patching, backup, DR) * Design and implement **end‑to‑end data pipelines** on Azure * Build and operate **Azure data platforms** (Fabric, Synapse, Data Factory, Data Lake, SQL, Cosmos DB) * Ingest data from operational systems, SaaS platforms, and streaming sources * Develop **data models** optimized for analytics and downstream consumption * Ensure **data quality, reliability, and performance** at scale * Implement security and governance (Purview, RBAC, data access controls) * Partner with analytics, BI, and AI teams to enable **insights and advanced use cases** * Optimize **cost and performance** across data workloads. **Requirements:** * 3+years hands‑on experience with **Azure core infrastructure services** * Deep understandin