Azure Infrastructure Engineer (Bicep/IaC)

About the role

InnoWave is looking for a dynamic, agile person with good communication skills to complete our team. If you're based in Texas, this might be the opportunity for you!

Responsibilities

• Designing, provisioning, and governing Azure cloud infrastructure using Infrastructure-as-Code, with Bicep as the primary template language for defining and deploying Azure Resource Manager (ARM) resources. The emphasis is on cloud architecture, resource design, and infrastructure governance.
• Design and author Bicep templates and reusable modules to provision Azure infrastructure: compute (VMs, App Services, AKS), networking (VNets, subnets, NSGs, Private Endpoints, Peering), storage (Blob, Files, Managed Disks), and data services (Azure SQL, Cosmos DB).
• Architect network topology for enterprise/telecom workloads, including hub-and-spoke VNet designs, ExpressRoute/VPN Gateway connectivity, and traffic segmentation between environments.
• Define and enforce identity and access controls using Azure RBAC, Managed Identities, and Conditional Access policies to secure infrastructure resources.
• Establish governance frameworks through Azure Policy, Management Groups, and subscription/resource group hierarchy design to enforce tagging standards, cost controls, and compliance requirements.
• Manage Key Vault configurations for secrets, certificates, and encryption key lifecycle across environments.
• Design high-availability and disaster recovery architecture, including Availability Zones, region pairing, backup strategies, and failover configurations.
• Maintain a library of modular, parameterized Bicep templates to support consistent provisioning across dev, staging, and production environments.
• Monitor and optimize infrastructure cost through right-sizing recommendations, reserved instance/savings plan analysis, and resource lifecycle management.
• Configure Azure Monitor and Log Analytics workspaces to support infrastructure health visibility.
• Document network diagrams, architecture decision records (ADRs), and infrastructure runbooks for operational continuity.
• Support capacity planning and scalability assessments as workloads grow across the organization's Azure footprint.

Requirements

• Degree in Computer Science or in similar areas.
• 3+ years hands-on experience authoring Bicep templates and ARM JSON for Azure resource provisioning.
• Strong knowledge of Azure Landing Zone design, subscription vending, and resource hierarchy best practices.
• Deep understanding of VNets, NSGs, route tables, Private Link/Endpoints, DNS, and hybrid connectivity (ExpressRoute/VPN).
• Proficiency with Azure AD/Entra ID, RBAC role design, Managed Identities, and Key Vault.
• Experience with Azure Policy, Blueprints/Template Specs, and Management Group hierarchies.
• Familiarity with Azure Storage tiers, redundancy options (LRS/ZRS/GRS), and database infrastructure (Azure SQL, Cosmos DB).
• Experience configuring Azure Monitor, Log Analytics, and infrastructure-level alerting.

Qualifications

• Certifications preferred: AZ-104 (Azure Administrator Associate) or AZ-305 (Solutions Architect Expert).

Skills

• Experience with Microsoft Fabric, Azure Data Lake, or Synapse infrastructure dependencies.
• Exposure to hybrid/on-prem to cloud migration projects, particularly in telecom or enterprise environments.
• Familiarity with Terraform or PowerShell DSC as complementary/legacy IaC tools.
• Knowledge of FinOps practices and Azure Cost Management tooling.
• Prior consulting or client-facing experience across distributed international teams and time zones.
• Strong architectural thinking with attention to scalability, security, and long-term maintainability of infrastructure design.
• Clear documentation habits, particularly around network diagrams and architecture decisions.
• Ability to translate business/application requirements into infrastructure specifications.
• Comfortable working in Agile environments while owning infrastructure design independently of sprint-based feature delivery.

This response is AI-generated, for reference only.