Senior Azure Engineer – Cloud Infrastructure, APIM & Security
- Hiring from
- Probably Worldwide
- Work type
- Remote
- Posted
Is this job info correct?
537,882 remote jobs, straight from company career pages
100% free · New jobs every hour
Show job descriptionHide job description
About Us
At LatentBridge, we make digital transformation work—without the noise.
We help enterprises simplify the complex, using AI orchestration and intelligent automation to solve real operational challenges. Our focus is on the parts of the business that are often overlooked—compliance, audit, policy, and risk—where precision, scalability, and accountability matter most.
Our products—Epic AI and IntellixCore—are built for this depth.Epic AI delivers enterprise-grade search and knowledge assistance directly inside the tools people already use—making access to information instant and intuitive.
IntellixCore is a platform to build, deploy, and scale intelligent agents across critical workflows—seamlessly integrating with existing systems.
We work with global banks, financial institutions, and legal firms—teams navigating constant change, regulatory pressure, and operational complexity.
In 2024, we were named one of the Deloitte UK Technology Fast 50, recognised for our growth and the tangible impact we deliver.
What sets us apart is not just what we build, but how we build it—grounded in enterprise realities, delivered with clarity, and always focused on outcomes that matter.
Job Description
This is a remote position.
Senior Azure Engineer – Cloud Infrastructure, APIM & Security
About the Role
We are looking for an experienced Senior Azure Engineer to build, harden, automate, and operate the Azure cloud infrastructure supporting enterprise Model Context Protocol (MCP) connectivity, gateway policies, and Microsoft Foundry model access.
The ideal candidate will have extensive hands-on experience in Azure API Management (APIM), networking, Microsoft Entra ID security, Infrastructure as Code (Terraform/Bicep), and production operations, ensuring resilient, observable, and compliant cloud foundations across both phases of the programme.
Programme Context & Phased Effort Allocation
The engagement is structured as a 22-week sequential programme divided into two delivery phases, assuming a five-day working week:
- Phase 1: MCP Gateway and Governance (Weeks 1–10 / 10 Weeks): Full-time allocation (1.0 FTE) configuring Azure APIM, gateway routing policies, private networking, secrets management, and automated CI/CD pipelines.
- Phase 2: Model Access through Microsoft Foundry (Weeks 11–22 / 12 Weeks): Full-time allocation (1.0 FTE) supporting Microsoft Foundry deployments, model endpoint connectivity, failover testing, and production handover.
Key Responsibilities
- APIM Gateway Configuration: Configure Azure APIM, gateway policies, routing, authentication, mutual TLS, and role-based access controls.
- Networking & Security Integration: Implement secure networking (VNets, Private Endpoints, NSGs), Microsoft Entra ID integration, managed identities, secrets management (Azure Key Vault), and environment configuration.
- Infrastructure as Code & CI/CD: Build reusable Infrastructure as Code (Terraform or Bicep) and multi-stage CI/CD pipelines for automated, repeatable deployment.
- Monitoring & Telemetry: Configure Azure Monitor, Log Analytics, diagnostic logs, metric alerts, and operational health dashboards.
- High Availability & Disaster Recovery: Implement high availability and disaster recovery arrangements, and test deployment, capacity, and failover under load.
- Microsoft Foundry & Operational Release: Support Microsoft Foundry deployments, model endpoint connectivity, production release validation, and operational handover to platform teams.
Required Skills & Experience
- 7–10+ years of experience as an Azure Cloud Engineer, Platform Engineer, or DevOps / Site Reliability Engineer.
- Azure APIM Expertise: Strong hands-on experience configuring Azure API Management (APIM), XML policy definitions, rate-limiting, authentication delegation, and gateway routing.
- Identity & Access Management: Deep knowledge of Microsoft Entra ID (Azure AD), managed identities, RBAC, service principals, and Key Vault integration.
- Azure Networking: Hands-on experience with VNet peering, Private Endpoints, Private Link, DNS, and Application Gateways.
- Infrastructure as Code (IaC) & CI/CD: Proficiency with Terraform or Bicep, alongside Azure DevOps pipelines or GitHub Actions for automated zero-downtime releases.
- Monitoring & Diagnostics: Hands-on expertise with Azure Monitor, Application Insights, Log Analytics (KQL queries), and alert automation.
Preferred Qualifications
- Regulated Financial Services Experience: Familiarity with financial services compliance, data residency, private cloud perimeter controls, and audit trails.
- AI Infrastructure Exposure: Experience provisioning infrastructure for AI/ML workloads, Azure OpenAI Service, or Microsoft Foundry endpoints.
- Azure Certifications: Microsoft Certified: Azure Administrator Associate, Azure Security Engineer Associate, or DevOps Engineer Expert.
- Container & Container Apps: Experience with Azure Container Apps (ACA), AKS, or Docker-based microservices deployments.
Key Competencies
- Azure API Management (APIM) Engineering
- Infrastructure as Code (Terraform / Bicep)
- Microsoft Entra ID & Zero-Trust Cloud Security
- Azure Private Networking & Perimeter Defense
- CI/CD Pipeline Automation (Azure DevOps / GitHub)
- Telemetry, Logging & Diagnostic Dashboards (KQL)
- High Availability & Disaster Recovery Drills
- Operational Handover & Production Support
Requirements
Required Skills & Experience
- 7–10+ years of experience as an Azure Cloud Engineer, Platform Engineer, or DevOps / Site Reliability Engineer.
- Azure APIM Expertise: Strong hands-on experience configuring Azure API Management (APIM), XML policy definitions, rate-limiting, authentication delegation, and gateway routing.
- Identity & Access Management: Deep knowledge of Microsoft Entra ID (Azure AD), managed identities, RBAC, service principals, and Key Vault integration.
- Azure Networking: Hands-on experience with VNet peering, Private Endpoints, Private Link, DNS, and Application Gateways.
- Infrastructure as Code (IaC) & CI/CD: Proficiency with Terraform or Bicep, alongside Azure DevOps pipelines or GitHub Actions for automated zero-downtime releases.
- Monitoring & Diagnostics: Hands-on expertise with Azure Monitor, Application Insights, Log Analytics (KQL queries), and alert automation.
Benefits
Key Competencies
- Azure API Management (APIM) Engineering
- Infrastructure as Code (Terraform / Bicep)
- Microsoft Entra ID & Zero-Trust Cloud Security
- Azure Private Networking & Perimeter Defense
- CI/CD Pipeline Automation (Azure DevOps / GitHub)
- Telemetry, Logging & Diagnostic Dashboards (KQL)
- High Availability & Disaster Recovery Drills
- Operational Handover & Production Support