Azure Cloud Engineer

This position is based on-site in the Greater Seattle Area.

Join our dynamic and innovative team at Sono Bello, where we are committed to leveraging innovative cloud first technologies to drive our business forward. As an Azure Cloud Engineer, you will play a pivotal role in designing, implementing, and supporting our Azure cloud infrastructure, ensuring our systems are secure, scalable, and highly available. We are looking for a passionate and experienced professional who thrives in a collaborative environment and is eager to contribute to our mission of delivering exception cloud solutions.

ESSENTIAL DUTIES AND RESPONSIBILITIES:
• Azure Networking: Designs, implements, configures and maintains all virtual networks, ensuring secure and efficient communication between Azure resources and local offices.
• Private Link, Perring Services, DDoS Protection, Azure Firewalls, Network Security Groups, Web Application Firewall, Application Gateways, Load Balancers, Bastions, Azure Route Tables, Front Door and CDN, and Network Watcher.
• Identity and Access Management: Manages Entra ID (Azure AD), Privileged Identity Management, and enforces role-based access control to secure user identities and resources following a least privileged model.
• Entra Connect, Enterprise Applications, and Managed Identities.
• Compute: Deploys, configures, and manages Azure Virtual Machines to ensure optimal performance and security.
• Availability Sets, Scale Sets, App Services, Azure Backup, and Azure Update Manager.
• Storage Management: Configures and oversees Azure storage solutions, ensuring data availability, durability, and cost-efficiency.
• Storage Accounts, Snapshots, Disks, and Recovery Services Vaults.
• Automation and Scripting: Develops and supports automation and templates to streamline Azure deployments and administrative tasks.
• Automation Accounts, Azure Policy, Azure Resource Manager, Advisory, and PowerShell (light not complex usage).
• Monitoring: Utilizes Log Analytics Workspace for logging, and Azure Monitor.
• Database Services: Provide best practice configurations for Azure database services, ensuring data integrity, security, and optimal performance for applications.
• Document knowledge base articles on repeatable configurations.
• Document all configurations in our knowledge base center for IT to access.
• Create technical documentation for other teams to follow.
• Set the example and be an advocate for following a Least Privilege model.
• Set the example and be an advocate for following a change management process.

EDUCATION, EXPERIENCE AND SKILLS REQUIRED:
• A bachelor’s degree in information technology, computer science, a related field, or equivalent work experience.
• Proven hands-on experience (3+ years) in Azure engineering role or similar role with the majority of the products listed above.
• Hands-on experience building Azure-based services with Azure Resource Manager (ARM), ARM templates, ARM policy, and Azure Active Directory (Entra).
• Good working knowledge of Microsoft best practice configurations, security, encryption, and protocols such as encryption, PKI, modern authentication and cloud app authorization architectures and protocols such as SAML or OAUTH.
• Experience working in the products: M365 products such as Exchange, SharePoint, Teams, and Azure.
• Experience using PowerShell in a Microsoft 365 tenant.

PREFERRED QUALIFICATIONS:
• This is a new security team being built out. This will be the first role in the new team of three different roles. Should be comfortable working in a new team.
• The following certifications are not required but a plus.
• Microsoft Certified: Azure Network Engineer Associate
• Microsoft Certified: Azure Identity and Access Administrator Associate
• Microsoft Certified: Azure Solutions Architect Expert

WORK ENVIRONMENT:

Work onsite at the Corporate Office in Bellevue, WA for a minimum of 3 days a week. May work in remote office locations on Wednesdays and Fridays.