Duration of assignment:

6 months

Special working conditions (travel, on call etc.):

3 days a week in office

• Be part of an exciting team where you will be challenged every day.
• Work closely with the range of teams within the business to bring products to life.
• Work with customers and identify opportunities to support their strategy and improve their processes across functions.

The Role

Azure Integration Lead

Key responsibilities:(Up to 10, Avoid repetition)

• Work with partner SMEs, internal cloud and security and enterprise architects to develop an understanding of the heterogeneous cloud environment, current pain points and areas of opportunities for the target Azure architecture
• Work with partner architects to devise the future vision, target architecture, operating model, and delivery approach to separate and migrate workloads as part of a divesture
• Design the target Azure tenant, landing zone and network architecture aligned to the Well Architected Framework (WAF) to incorporate Azure best-practice for use of native services as well as shared and security services for foundation phase and then extended to end-state
• Basic enterprise integration on Azure
  Use Azure services such as Azure Logic Apps and Azure API Management to orchestrate calls to enterprise Back End systems including Azure services, software as a service (SaaS) systems,
  Logic App, Function app, Event Grid and web services
• Enterprise integration using message broker and events.
• Integrate enterprise Back End systems using message broker and events to decouple services for greater scalability and reliability.
• Security
• Designing and implementing cloud security strategies and policies that meet an organization's specific needs.
• Ensuring the security of cloud-based data and applications against unauthorized access, theft, and other threats.
• Conducting regular security assessments and audits to identify vulnerabilities and develop plans to address them.
• Demonstrated capability to design, deploy and operationalize secure and highly scalable enterprise systems on public clouds (Ideally Azure)
• Experience with secure software development, data protection, cryptography, key management, identity, and access management (IAM), network security (VPNs) within cloud environments.
• Develop the workload migration strategy and approach, based on application affinity analysis, from Legacy cloud and on-premises environments to the target landscape, taking into consideration NG/ESO security policies and standards and governance requirements. The work will include consideration for migration of Legacy, current and future planned workloads part of NGESO's business plan
• Work with partner SMEs and internal architecture and security teams to devise the target cloud operating model and how it integrates with NGESO's eco-system, with consideration for:
• Alignment to Microsoft's Cloud Adoption Framework
• Integration with ITSM, Cyber Security Monitoring and Network services
• Adoption of Technology Business Management (TBM) framework as part of the target operating model design
• Target governance model for cloud services

Your Profile

Key skills/knowledge/experience: (Up to 10, Avoid repetition)

• Azure Cloud certification (eg AZ303, AZ304, AZ305)
• Experience in Azure landing zone design including tenant and subscription planning, platform automation design, devsecops tooling, network topology & connectivity, access management & privileged identity design, platform monitoring, security architecture, high availability architecture design.
• Experience in one or more programming languages: .NET/C#, Java, Python, Ruby or PHP
• Understanding of Cloud Platform Services (IaaS, SaaS, and PaaS)
• Experience in DevOps methodology (preferably DevSecOps), both technically and organisationally, including continuous deployment, delivery pipelines and test environments
• Microservices, Containers - Docker, Kubernetes

Good to have: (As applicable)

• Other cloud platforms like AWS
• Azure AD management
• Hosting traditional Virtual Machines in Azure, Hyper-V and VMware.
• Different technologies and solutions for Single Sign On, Multi Factor Authentication and AD Synchronization
• Web application development including using tools like Visual Studio
• Network technologies, especially in Azure