Cloud Infrastructure Engineer III at AF Group in Lansing, Michigan

Job Description:

This individual will primarily focus on implementing Azure-based cloud solutions, using Infrastructure-as-Code (IaC) tools like Terraform, while also serving as an escalation point for troubleshooting and resolving complex infrastructure-related issues. The ideal candidate will have deep expertise in Azure cloud networking, virtualization, DevOps practices, and Identity and Access Management (IAM). You will work closely with DevOps teams to implement Terraform modules for Azure, assist in cloud migrations to Azure, and manage Role-Based Access Control (RBAC) to secure Azure resources. This role provides an opportunity to play a critical part in building scalable, secure, and automated cloud solutions on Microsoft Azure.

• Design, deploy, and manage infrastructure on Azure, focusing on scalability, security, and automation.
• Use Terraform and other Infrastructure-as-Code (IaC) tools to implement and manage Azure cloud resources, ensuring modularity, reusability, and ease of consumption by other teams.
• Assist in cloud migration projects from on-premises and other cloud platforms to Microsoft Azure.
• Implement and manage Azure networking solutions, including Virtual Networks, ExpressRoute, VPN Gateways, and network security.
• Configure and manage Virtual Machines (VMs), scaling, and performance optimization within Azure.
• Implement Role-Based Access Control (RBAC) policies and ensure proper Identity and Access Management (IAM) practices across Azure resources.
• Configure and manage Azure AD roles, Custom RBAC roles, Azure AD Groups, and Conditional Access policies to enforce least-privilege access control for users and applications.
• Collaborate with security teams to enforce access control policies for sensitive resources and align with organizational security and compliance requirements.
• Serve as an escalation point for complex cloud infrastructure issues and troubleshoot problems related to Azure resources, networking, VM performance, and PaaS offerings.
• Provide root cause analysis and post-mortem documentation for major incidents and failures.
• Partner with DevOps teams to integrate Azure infrastructure into CI/CD pipelines, ensuring automation and efficient provisioning of resources using IaC.
• Assist in implementing Azure DevOps or GitHub Actions to automate infrastructure provisioning, deployments, and monitoring.
• Experience with Windows Server administration, including Active Directory, Group Policy Objects (GPO), DNS, and DHCP.
• Expertise in diagnosing and resolving complex infrastructure issues across cloud and on-prem environments.
• Knowledge of Azure Security Center, Azure Sentinel, and security best practices to monitor and secure Azure resources.

EDUCATION

• Bachelor's degree in computer science, information technology, or related field required.
• Certification or progress toward certification of, industry-recognized professional designation preferred and encouraged.
• Combinations of relevant education and work experience may be considered in lieu of a degree.
• Continuous learning, as defined by Company's learning philosophy, is required.

EXPERIENCE

• 7 years' experience within an IT environment which provides the necessary skills, knowledge and abilities
• Experience within the insurance industry highly preferred.

QUALIFICATIONS

• 5+ years' experience in the implementation, and maintenance of enterprise-level systems in Azure.
• 7+ years experience with administering Windows Server OS.
• 8+ years experience with administering Active Directory, GPO, DNS.
• 3+ years experience working with Linux servers.
• 3+ years experience working with Kubernetes and containerized solutions.
• Experience in a large complex enterprise environment, preferably in Healthcare, Insurance, or a similarly government-regulated environment.

WORKING CONDITIONS
Work is performed in an office setting with no unusual hazards.



PAY RANGE



Actual compensation decision relies on the consideration of internal equity, candidate's skills and professional experience, geographic location, market and other potential factors. It is not standard practice for an offer to be at or near the top of the range, and therefore a reasonable estimate for this role is between $80,900 and $211,900


#LI-AD1 #AFG Apply Now