IT Infra Engineer

Job Description - Set up Maintain Azure Hybrid Cloud Core Infrastructure - Install, maintain upgrade MS SQL Server Database on Azure Cloud in a Secure, HA DR Environment Skills: - Azure Cloud Administration - Active Directory (AD), ADFS Administration - Azure Devops CI/CD Pipelines Security setup Skill - MS SQL Server Administration - Window Server Administration, - Proficient PowerShell Scripting /.NET Programming - Knowledge of Project Management Documentation Artifacts for SDLC Change Management - Good Document writing Skill on Microsoft Excel PowerPoint Preparation - Programming Experience in .NET Environment (Nice to Have) - Work Experience on Azure Security Centre, Azure Defender, and Azure Sentinel (nice to Have) - Experience on Hyper-V Admin, Backup Tools (Nice to Have) - Work Experience in ISO27001/SOC2/GDPR Compliant Organization(Nice to Have) Certifications: - Exam AZ-800: Administering Windows Server Hybrid Core Infrastructure - Exam AZ-801: Configuring Windows Server Hybrid Advanced Services - SC-300: Microsoft Identity and Access Administrator - Microsoft Certified: Azure Database Administrator Associate (DP-300) - MCDBA/Microsoft Certified IT Professional (MCITP) Database certification Personal attributes: - Good Communication skills specially written, Excel and PowerPoint Preparation - Team Leader, Effectively articulation of ideas, convey information. - Addresses customer inquiries or issues promptly professionally. - Clear and concise communication is essential for understanding requirements expectations. Azure Administrator Activities Overview: - Create detailed design documents, architectural diagrams, and solution blueprints. - Organize resources by creating a structured subscription model that aligns with business units, environments (e.g., dev, test, prod), and cost centers. - Use management groups to efficiently manage access, policies, and compliance across multiple subscriptions. - Conduct assessments of current infrastructure and recommend cloud migration strategies. - Implement continuous integration and continuous deployment (CI/CD) pipelines using Azure DevOps to automate the application lifecycle. - Ensure high availability, disaster recovery, and business continuity for Azure solutions. - Design and implement security best practices for Azure environments. - Work closely with development, operations, and security teams to integrate Azure solutions. - Implement cost management strategies to optimize cloud spending. - Monitor and report on cloud usage and costs, providing recommendations for cost savings. Azure AD Admin Activities: - Implement identity and access management solutions using Azure Active Directory (Azure AD). - Manage and maintain the Azure Active Directory (Azure AD) environment. - Create, modify, and delete user accounts, groups, and roles. - Manage synchronization between on-premises Active Directory and Azure AD using Azure AD Connect. - Implement and manage identity and access management (IAM)policies, including role-based access control (RBAC) and conditional access policies to enforce the principle of least privilege. - Integrate Azure AD with other cloud services and on-premises systems. - Automate routine administrative tasks using PowerShell and other scripting tools. - Manage single sign-on (SSO) configurations and integrate with external identity providers. - Generate and analyze reports on user activities, access patterns, and security incidents. - Assist with onboarding and offboarding processes to ensure proper access management. - Work closely with IT, security, and development teams to implement and manage Azure AD solutions. Azure Network Admin Activities: - Design and implement Azure network solutions, including virtual networks, subnets, network security groups (NSGs), and routing configurations. - Manage and maintain azure network services such as Azure VPN Gateway, Azure ExpressRoute, Azure Firewall, Azure Load Balancer, and Azure Traffic Manager. - Monitor network performance and troubleshoot network-related issues to ensure optimal performance and availability. - Implement and manage network security measures, including firewalls, intrusion detection/prevention systems (IDS/IPS), and security policies. - Conduct regular network assessments and audits to ensure compliance with industry standards and best practices. Azure Security Related Activities: - Establish security policies, standards, and procedures for Azure environments. - Conduct risk assessments and vulnerability analyses to identify potential threats. - Design secure architectures for Azure cloud solutions, including network, application, and data security. - Design and implement secure hybrid cloud solutions, integrating on-premises and Azure resources. - Configure Azure security services, such as Azure Security Centre, Azure Defender, and Azure Sentinel, Azure Policy, Azure Blueprints - Implement network security measures, including Azure Firewall, Network Security Groups (NSGs), and Virtual Private Networks (VPNs). - Deploy secure development practices, integrating security into CI/CD pipelines with tools like Azure DevOps. - Implement continuous monitoring and logging using Azure Monitor, Azure Log Analytics, and Azure Sentinel. - Maintain comprehensive documentation of security policies, procedures, and configurations. - Ensure compliance with regulatory requirements and industry standards (SOC2, GDPR, ISO 27001). MS SQL Server DBA Tasks: - Migrating a database from on-premises to the Azure cloud - Configuring Database for optimal performance and security - Indexing Strategies for optimization indexed views creation - Writing scripts to schedule regular maintenance tasks, automate backups, or generate reports - Developing and implementing strategies and procedures for disaster recovery - Design, build, testing of DR sites configuring Standby Database by Log shipping to DR site/cloud - Configuring HA using Failover Cluster Instances (FCI)/Database Mirroring - Performing Periodic Disaster recovery DR-Drills at agreed frequency - Scheduling regular online/offline full backups, periodic differential backups, transaction log backups - Ensuring compliance with YMC IT governance for Application Security - Managing user access, roles, permissions, enforcing password policies, configuring database auditing - Implementing Row-Level Security (RLS), Transparent Data Encryption (TDE) to protect data at rest. - Security audits covering Windows and SQL Server authenticated accounts. - IT Risks Management (Risk Identification Mitigation) - Investigating and resolving database-related issues, such as performance problems, data corruption, connectivity errors, and other system failures - Monitoring SQL Server performance metrics (CPU and memory usage), analyzing database wait statistics. - Identifying and resolving performance bottlenecks Using dynamic management views (DMVs) and performance monitoring tools (such as SQL Server Profiler or Extended Events) - Optimizing query execution plans, re-writing queries, utilizing query hints or plan guides - Server Parameter configurations to improve response times and resource utilization. - Handling Developers Requests for script runs for packages, functions, procedures, new tables etc. - Clone, refresh or replace an existing database with a copy from another instance - Applying SQL Server patches, service packs, and updates to ensure the database system remains up-to-date with the latest bug fixes - Planning and executing SQL Server version upgrades - Implementing strategies such as partitioning or horizontal scaling to manage large databases Other Tasks: - Identify potential risks or issues before they escalate - Dealing with Customers for issues - Embrace change, adapt quickly to shifting Database needs or conditions. - Maintaining documentation of database configurations, processes, and procedures - Generating reports on database performance, availability, and security metrics for management and compliance purposes - Pay attention to details to ensure project requirements and deliverables are met accurately - Review project documentation, monitor progress - Work closely with diverse teams, stakeholders, and clients - Provide Consultancy to the Customers