Job description

Must-Have Skills:

3+ years of hands-on experience in Microsoft Azure administration and DevOps.
Excellent verbal and written communication skills in English - Mandatory.
Strong hands-on experience with Microsoft Entra ID (Azure AD), including users, groups and enterprise applications.
Practical knowledge of Azure RBAC, least-privilege access, role assignments and access reviews.
Experience managing Azure subscriptions, resource groups and Development, QA, Staging and Production environments.
Experience managing App Registrations, Enterprise Applications, Service Principals and Managed Identities.
Experience configuring delegated and application API permissions, consent, secrets and certificates.
Ability to troubleshoot authentication, authorization, SSO and application-access issues.
Experience administering Azure DevOps organizations, projects, repositories, users and permissions.
Experience creating and maintaining CI/CD pipelines, YAML pipelines, branch policies and secure service connections.
Hands-on experience with Git, Azure CLI and/or PowerShell automation.
Working knowledge of Azure App Services, Virtual Machines, Storage Accounts, Key Vault, Azure SQL, VNets and NSGs.
Understanding of Azure Monitor, Application Insights, cloud security, governance and audit readiness.
Ability to investigate issues end-to-end and coordinate clearly with development, QA, technical management and project teams.

Daily Responsibilities:

Administer Azure subscriptions, resource groups and environments; monitor resource health, availability and configuration.
Provision, modify and revoke Azure and Entra ID access for employees, developers and applications.
Maintain users, groups, roles and permissions through Azure RBAC and group-based access where appropriate.
Perform periodic access reviews; identify inactive, excessive or unauthorized access and remediate it promptly.
Manage App Registrations, Enterprise Applications, Service Principals, API permissions, secrets and certificates securely.
Support MFA, Conditional Access, authentication and authorization requirements; troubleshoot user and application access issues.
Manage Azure DevOps projects, repositories, permissions, branch policies and secure service connections.
Create, maintain and troubleshoot CI/CD and YAML pipelines for application builds and deployments.
Support Azure infrastructure including App Services, VMs, Storage Accounts, Key Vault, databases, VNets and monitoring services.
Automate repeatable administration and deployment tasks using PowerShell, Azure CLI and scripting.
Support Infrastructure as Code using Terraform, ARM templates or Bicep where required.
Maintain clear documentation, audit trails, incident summaries and access reports in English.
Work with technical teams to improve cloud security, governance, deployment reliability and environment segregation.

Good-to-Have:

Conditional Access, MFA, Privileged Identity Management (PIM) and Entra ID Access Reviews.
OAuth 2.0, OpenID Connect, SSO and application integration patterns.
Terraform, ARM templates and Bicep.
Docker, Kubernetes and Azure Kubernetes Service (AKS).
Microsoft Defender for Cloud, Azure Policy and DevSecOps practices.
Linux and Windows Server administration; networking fundamentals including firewalls and load balancers.
AWS IAM or AWS administration exposure.
Grafana or other observability and monitoring platforms.

Preferred Certifications:

AZ-900 – Microsoft Azure Fundamentals.
AZ-104 – Microsoft Azure Administrator Associate.
AZ-400 – Designing and Implementing Microsoft DevOps Solutions.
SC-300 – Microsoft Identity and Access Administrator.

Candidate Profile:

We are looking for an engineer who is strong in Azure administration and identity and access management, not only CI/CD pipelines. The candidate should be comfortable owning the lifecycle from people and groups to roles, permissions, applications, Azure resources, subscriptions and DevOps access.

Can determine who has access to a subscription, resource group, Production environment, application or API, and why.
Can provide the right level of access without over-privileging users or applications.
Communicates technical issues, root causes, remediation plans and documentation clearly in English to technical and non-technical stakeholders.

Key Performance Areas:

Azure subscription, resource and environment management.
Entra ID user, group and application administration.
Accurate Azure RBAC and least-privilege governance.
Access provisioning, deprovisioning and audit readiness.
Application identity, Service Principal and API permission management.
Azure DevOps administration and CI/CD pipeline reliability.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.