Technical Skills
a) Azure and Azure Policies:
Expertise in Microsoft Azure, including core services such as Azure Resource Manager (ARM), Azure RBAC, Azure Networking, Azure Compute, Storage, with the ability to manage compliant cloud environments at scale.
Experience in creating, managing, and implementing Azure Policies.
Knowledge of Azure Policy Definitions (Custom and Built-in), Initiatives, Assignments, Exemptions and Policy Effects.
Knowledge of Azure Policy Compliance Management and Remediation (Auto and Manual).
b) Azure Governance:
Proficiency in Azure services like Azure DevOps, Azure Functions, Azure Runbook, and others.
c) Infrastructure as Code (IaC):
Knowledge in using tools like Terraform, Azure Resource Manager (ARM) templates, and Bicep.
Experience in writing and maintaining IaC scripts to automate infrastructure deployment.
Familiarity with version control systems like Git for managing IaC code.
d) Security and Compliance:
Basic understanding of Azure Security Center and Azure Defender.
Ability to implement security best practices and compliance controls.
Knowledge of identity and access management (IAM) using Azure Active Directory (AAD).
e) Continuous Integration/Continuous Deployment (CI/CD):
Experience with Azure DevOps pipelines and/or GitHub for automating build, test, and deployment processes.
Skills in configuring secure access to pipeline resources and managing pipeline permissions.
f) Monitoring and Logging:
Experience in using Azure Monitor, Rest API calls, Log Analytics, and Application Insights.
Ability to set up alerts and dashboards to monitor compliance and security metrics.
g) Coding and Scripting:
Knowledge of scripting languages such as PowerShell, Azure Powershell, Azure CLI, Bash, Declarative language using YAML and JSON, Terraform and Markdown.
Code versioning : GitHub Repositories / ADO repositories
Ability to write scripts for automating security controls and compliance checks.
h) Networking and Security:
Understanding of network security concepts, including firewalls, VPNs, and network security groups (NSGs).
Experience with securing application secrets using Azure Key Vault and other Client Secret Management Tools.
Knowledge of Client Security Coding Best Practices and Cyber Security Guidelines.
i) Reporting:
Basic knowledge of Azure Resource Graph, SQL query, KQL, EventHub, EventGrid, PowerBI.