Builds and operates the Azure platform that fmPilot 2.0 migrates onto: Landing zone, networking, platform services, security baseline and monitoring. Partners with the DevOps engineer so every environment is reproducible through code. Key Responsibilities ‒ Design and provision Azure services for the platform: App Service, Functions, Azure SQL, Storage, Service Bus, Key Vault ‒ Own networking: Virtual networks, subnets, private endpoints, network security groups, DNS and hybrid connectivity, including SFTP integration over VNet. ‒ Establish the security baseline: managed identities, role-based access control, Azure Policy and Microsoft Defender for Cloud. ‒ Build monitoring and alerting with Azure Monitor, Application Insights and Log Analytics. ‒ Design for high availability and disaster recovery; manage capacity and cost. ‒ Support workload migration cutovers and troubleshoot platform issues across environments. Required Skills And Experience ‒ Five or more years in infrastructure or cloud engineering with substantial hands-on Azure experience. ‒ Deep knowledge of Azure platform-as-a-service offerings and when to use each. ‒ Azure networking, including private endpoints, firewalls, DNS and hybrid connectivity to on-premises systems. ‒ Identity-aware infrastructure: managed identities, RBAC and Key Vault integration. ‒ Scripting with PowerShell or Azure CLI; working knowledge of Bicep or Terraform. ‒ Monitoring, alerting and incident response for production cloud workloads. Preferred Qualifications ‒ Azure certifications such as AZ-104 or AZ-305. ‒ Experience migrating .NET workloads from on-premises or IaaS to Azure PaaS. ‒ Cost optimization and reserved capacity planning experience. Show more Show less