Engineer (SR) Cloud
Cargolux
Task Responsibilities:
• Implement Azure infrastructure solutions based on architectural designs by translating architectural blueprints into technical implementations and drive automation standards.
• Mentor junior engineers and contribute to knowledge sharing.
• Drive Infrastructure as Code (IaC) using Terraform, Bicep, and ARM templates.
• Build and maintain Azure DevOps pipelines for CI/CD and orchestration:
• Design and implement release pipelines with YAML templates, variable groups, Azure App Configuration, release gates, and approval processes.
• Manage Microsoft Entra ID identity services:
• Cloud Sync, Azure AD Connect, Privileged Identity Management (PIM)
• Administrative Units, Entitlement Management, Cross-Tenant Sync, B2B/B2C
• Enterprise Applications: App Registration, APIs, SSO, OpenID Connect, OAuth 2.0
• Configure Active Directory Domain Services and Kerberos authentication for hybrid environments.
• Data Services: Azure SQL Database, Blob & File Storage, Key Vaults, Cosmos DB.
• Deploy and manage Azure services:
• Compute & App Services: Virtual Machines, Web Apps, APIs, Functions, Logic Apps, Event Grid, Service Bus
• Implement Governance & Compliance:
• Management Groups, Landing Zones, Azure Policies, Azure Tags
• Configure Networking & Security:
• NSGs, Azure Routes, Front Door, Application Gateway, WAF
• Azure DNS, Private DNS, Virtual WAN, Site-to-Site VPN, Private Links, Private Endpoints
• Apply advanced security controls with Microsoft Defender for Cloud.
• Implementing High Availability and Disaster Recovery:
• Availability Zones, Load Balancing, Azure Site Recovery, Backup, Geo-Redundancy
• Secure access, monitor and troubleshoot virtual networks.
• Manage data protection and security compliance.
• Configure, monitor, collect, and analyze data generated by cloud resources.
• Perform planned maintenance on cloud infrastructure resources when needed.
• Control creation of new resources (manual or automated) in alignment with design and architecture.
• Assist in optimizing the architecture of cloud infrastructure for business, security, and performance.
• Document and follow up tasks in Azure DevOps and ServiceNow.
Essential Requirements For The Position:
• 5+ years in cloud engineering or infrastructure roles.
• Expertise in Microsoft Azure services (compute, networking, storage, identity, data).
• Strong experience with IaC, Azure DevOps, and orchestration.
• Proficiency in PowerShell, Azure CLI, and automation frameworks.
• Knowledge of identity management, security, HA/DR, and cost optimization.
• Certifications:
• Microsoft Azure Administrator (required)
• Azure Network Engineer Associate (preferred)
• Azure Security Engineer Associate (preferred)
• Microsoft Certified: DevOps Engineer Expert (required)
• Team player and ability to work with multiple technical teams and technologies to ensure high security standard of the entire IT landscape.
Working Conditions:
Permanent contract.
Full-time position based in our HQ in Luxembourg.
Occasional travel required.
On-Call duty must be performed about 1-2 week per Month
The position holder might have to be an stand-by outside the normal office hours and weekends in case of incidents.
Standard office hours are to be expected Monday - Friday.
A Certificate of good conduct (Casier judiciaire, Polizeiliches Führungszeugnis) will be required in case of a positive selection.