Azure Infrastructure Engineer (Bicep/IaC)

InnoWave is looking for a dynamic, agile person, good communication skills to complete our team. If you're based in Texas, this might be the opportunity for you!

Azure Infrastructure Engineer (Bicep/IaC)

Responsibilities 

• Designing, provisioning, and governing Azure cloud infrastructure using Infrastructure-as-Code, with Bicep as the primary template language for defining and deploying Azure Resource Manager (ARM) resources.

• The emphasis is on cloud architecture, resource design, and infrastructure governance.

• Design and author Bicep templates and reusable modules to provision Azure infrastructure: compute (VMs, App Services, AKS), networking (VNets, subnets, NSGs, Private Endpoints, Peering), storage (Blob, Files, Managed Disks), and data services (Azure SQL, Cosmos DB).

• Architect network topology for enterprise/telecom workloads, including hub-and-spoke VNet designs, ExpressRoute/VPN Gateway connectivity, and traffic segmentation between environments.

• Define and enforce identity and access controls using Azure RBAC, Managed Identities, and Conditional Access policies to secure infrastructure resources.

• Establish governance frameworks through Azure Policy, Management Groups, and subscription/resource group hierarchy design to enforce tagging standards, cost controls, and compliance requirements.

• Manage Key Vault configurations for secrets, certificates, and encryption key lifecycle across environments.

• Design high-availability and disaster recovery architecture, including Availability Zones, region pairing, backup strategies, and failover configurations.

• Maintain a library of modular, parameterized Bicep templates to support consistent provisioning across dev, staging, and production environments.

• Monitor and optimize infrastructure cost through right-sizing recommendations, reserved instance/savings plan analysis, and resource lifecycle management.

• Configure Azure Monitor and Log Analytics workspaces to support infrastructure health visibility.

• Document network diagrams, architecture decision records (ADRs), and infrastructure runbooks for operational continuity.

• Support capacity planning and scalability assessments as workloads grow across the organization's Azure footprint.

• Degree in Computer Science or in similar areas.

• 3+ years hands-on experience authoring Bicep templates and ARM JSON for Azure resource provisioning.

• Strong knowledge of Azure Landing Zone design, subscription vending, and resource hierarchy best practices.

• Deep understanding of VNets, NSGs, route tables, Private Link/Endpoints, DNS, and hybrid connectivity (ExpressRoute/VPN).

• Proficiency with Azure AD/Entra ID, RBAC role design, Managed Identities, and Key Vault.

• Experience with Azure Policy, Blueprints/Template Specs, and Management Group hierarchies.

• Familiarity with Azure Storage tiers, redundancy options (LRS/ZRS/GRS), and database infrastructure (Azure SQL, Cosmos DB).

• Experience configuring Azure Monitor, Log Analytics, and infrastructure-level alerting.

• Certifications preferred: AZ-104 (Azure Administrator Associate) or AZ-305 (Solutions Architect Expert).

Nice to Have

• Experience with Microsoft Fabric, Azure Data Lake, or Synapse infrastructure dependencies.

• Exposure to hybrid/on-prem to cloud migration projects, particularly in telecom or enterprise environments.

• Familiarity with Terraform or PowerShell DSC as complementary/legacy IaC tools.

• Knowledge of FinOps practices and Azure Cost Management tooling.

• Prior consulting or client-facing experience across distributed international teams and time zones.

• Strong architectural thinking with attention to scalability, security, and long-term maintainability of infrastructure design.

• Clear documentation habits, particularly around network diagrams and architecture decisions.

• Ability to translate business/application requirements into infrastructure specifications.

• Comfortable working in Agile environments while owning infrastructure design independently of sprint-based feature delivery.

InnoWave gives equal opportunity in employment regardless of gender, gender identity, sexual orientation, marital status, race, nationality, religion, age, disability, political beliefs, or any other factor. InnoWave will not pay fees to any third-party agency or company that does not have a signed agreement, do not submit resumes/CV's directly.

By answering to this job post, you consent the use of your data by InnoWave Group, for as long as necessary. We conduct regular data-cleansing and updating exercises to make sure the information we have is relevant and accurate. If you have any doubt or request to make relatively to your personal data, please send an e-mail.