Azure Cloud Engineer
Help shape and operate a global hybrid cloud environment across Azure, infrastructure, security, networking and legacy systems.
About the role
We are looking for a hands-on Azure Cloud Engineer who enjoys working in a global hybrid environment. In this role, you will help improve, secure and operate critical cloud and infrastructure services across Azure, networking, identity, application hosting, monitoring and on-premise technologies.
You will join a technical environment where cloud and legacy systems work together, supporting both IT and OT landscapes. You will work in a business-critical environment where reliability, security and operational continuity are essential.
What you’ll do
· Manage, optimize and troubleshoot core Azure infrastructure services across compute, storage, networking, security and application delivery.
· Contribute to Azure cost optimization by reviewing resource usage, right-sizing workloads, identifying unused resources, and supporting licensing or reservation improvements.
· Investigate end-to-end hybrid connectivity issues across Azure, on-premise data centers, OT networks and vendor environments.
· Take ownership of platform services from deployment through monitoring, support, lifecycle management and continuous improvement.
· Perform structured troubleshooting, root cause analysis and follow-up improvements for operational incidents.
· Support business application platforms including Ultimo, Atlas, Tomcat, Hyperion/HFM, CXO.
· Manage internal platform services such as logging, SMTP relay, inventory, monitoring, backup, DNS, certificate management and automation tooling.
· Provide operating system-level support for Windows Server and Ubuntu Linux environments.
· Implement and support enterprise networking concepts including routing, firewall integrations, NSGs, DNS resolution and SASE migration activities.
· Maintain hybrid identity services including Entra ID, app registrations, RBAC, PIM and certificate management.
· Operate backup and disaster recovery solutions including Veeam for Azure, snapshots and cross-region DR scenarios.
· Improve observability and operational monitoring through Azure Monitor, Log Analytics, diagnostic policies, dashboards, alerting and Sentinel data ingestion.
· Strengthen platform security and secure administration practices using Defender for Cloud, CIS benchmarks, network hardening, least-privilege access, PIM, RBAC, managed identities and secure handling of secrets and certificates.
· Collaborate closely with OT, Platform, Security and external vendors such as NTT, Palo Alto and Oracle.
· Document platform designs, operational procedures and troubleshooting steps to improve consistency and reduce dependency on individual knowledge.
Functie-eisen
What you bring
Azure cloud experience
· Azure Virtual Machines, VM performance and SKU management.
· VNets, NSGs, load balancers and routing tables.
· Application Gateway and Azure Front Door.
· Storage Accounts, including Blob, File, Queue and Table storage.
· Key Vault for secrets, certificates and managed identities.
·Defender for Cloud and security baseline implementation.
· Azure Monitor and Log Analytics for monitoring and troubleshooting.
Infrastructure as Code and automation
· Working knowledge of Terraform to understand, maintain and apply existing Infrastructure as Code deployments.
· Ability to identify repetitive operational tasks and automate them using scripting, pipelines or Infrastructure as Code.
· Comfort with structured change processes, code reviews, deployment pipelines and controlled deployments for infrastructure changes.
Hybrid and legacy infrastructure knowledge
· Active Directory, including user and computer objects, group policies, group memberships, domain controller operations and upgrade scenarios.
· AD to Entra ID synchronization models, including Entra Connect, hybrid join concepts, PIM and RBAC mapping.
· DNS across on-premise and Azure environments, including split-brain DNS, Azure Private DNS, forwarding and internal name resolution issues.
· Certificate Authorities and PKI, including domain controller certificates, code-signing certificates and client/server SSL.
·Legacy server systems such as print servers, SMTP relay servers and file servers using SMB or NFS.
· Backup and disaster recovery systems, including Veeam Backup for Azure and hybrid backup designs with private endpoints.
Nice to have
· Experience with OT or industrial environments, including industrial network segmentation, monitoring platforms, OT firewalls or plant-floor integrations.
· Advanced Terraform experience, including module design, reusable patterns and automated cloud deployments.
·Python scripting experience for automation or operational tooling.
Who you are
· You enjoy working across both modern cloud platforms and traditional infrastructure.
· You are a strong problem solver who can investigate complex technical issues from application to network layer.
· You are comfortable working independently while keeping stakeholders informed.
· You communicate effectively with Security, OT, Platform teams and external vendors.
· You are motivated by improving infrastructure, automation, stability and security — not just maintaining what already exists.
Inclusiviteit en diversiteit
Uiteraard staat deze vacature open voor iedereen die zich hierin herkent. We geloven dat diverse teams van belang zijn voor ons als lerende organisatie, die voorop wil blijven lopen in de wereld van werk. Want juist verschillen tussen mensen zorgen voor groei. Van collega's, klanten, kandidaten en daarmee van Randstad Professional. Heb jij een uniek talent? We ontmoeten je graag.