Senior Azure Cloud Engineer

• Operate, support and troubleshoot production Azure environments across compute, storage, networking, identity and PaaS services, including VMs/VMSS, App Service, Azure Functions, API Management, Azure SQL, Storage and Key Vault.
• Execute service requests and changes within defined scope and SLAs, including Azure Front Door / Application Gateway WAF rule and IP allow-list changes, RBAC/PIM access and configuration updates.
• Manage SSL/TLS certificates, custom domains and certificate renewals/rotations, and automate the certificate lifecycle using Key Vault.
• Manage app registrations, service principals and secret/certificate expiry, reducing manual rotation through managed identities and automation.
• Act as the senior escalation point for complex incidents, taking ownership and driving issues to resolution with minimal supervision.

• Troubleshoot connectivity across VNets, peering, NSGs, UDRs, Azure Firewall, Private Endpoints, Private DNS zones and VPN/ExpressRoute.
• Maintain security and governance controls including Entra ID, RBAC, PIM, managed identities, Key Vault and Azure Policy, and remediate Microsoft Defender for Cloud recommendations.
• Support customer and government security, compliance and audit requirements (e.g. NZISM).

• Automate repeatable operational tasks using PowerShell, Azure CLI, Python or Bash, together with Azure Automation, Logic Apps and Azure Functions.
• Maintain and evolve existing Terraform, Bicep and ARM code and Azure DevOps pipelines so that changes are delivered safely and consistently, including remediating configuration drift.
• Follow and reinforce good Git practice, including branching, pull requests and code reviews.
• Use AI-assisted engineering tools (e.g. GitHub Copilot) responsibly to speed up scripting, troubleshooting and documentation.

• Enhance and tune monitoring and alerting using Azure Monitor, Log Analytics, Application Insights, alert rules and action groups, reducing noise and turning alerts into meaningful, actionable signals; write KQL for investigation and reporting.
• Perform root-cause analysis and problem management, and address root causes through code fixes and configuration improvements.
• Support backup, restore and disaster recovery testing using Azure Backup and Azure Site Recovery.
• Manage server patching and compliance using Azure Update Manager and Azure Arc.
• Maintain cost hygiene by acting on Azure Advisor recommendations and cost anomaly alerts, cleaning up orphaned resources and enforcing tagging standards.

• Work within ITIL-aligned incident, problem and change management processes, meeting relevant service levels and operational standards.
• Participate in the on-call roster and perform after-hours work where required by the assignment.
• Maintain accurate technical documentation, runbooks, operational procedures and knowledge articles.
• Work with the Azure Practice, application teams and customers to accept new solutions into BAU, and share knowledge and mentor other engineers in the team.

• Support Windows Server patching, configuration and troubleshooting across Azure and on-premises environments.
• Support Active Directory, DNS and hybrid identity, including Entra Connect / Cloud Sync.
• Support VMware vSphere, ESXi and vCenter components where required within hybrid customer environments.

Skills and Experience

• Azure operations: AZ-104-level, hands-on experience operating enterprise Azure environments in production, including Entra ID, RBAC and access management.
• Networking and application delivery: Troubleshooting VNets, NSGs and Private Endpoints/DNS, plus hands-on experience with Azure application delivery services such as Front Door, Application Gateway, WAF or API Management.
• Scripting and automation: PowerShell and Azure CLI, plus Python or Bash.
• IaC and DevOps: Working knowledge of Terraform or Bicep/ARM, Azure DevOps pipelines and Git.
• Monitoring: Azure Monitor, Log Analytics, Application Insights and KQL.
• Production support: ITIL-aligned incident, problem and change management, including on-call.

• Containers: Docker and Azure Kubernetes Service (AKS).
• GitHub: GitHub Actions and GitHub Copilot.
• Security operations: Microsoft Defender for Cloud and Microsoft Sentinel.
• Hybrid: Azure Arc, Windows Server, Active Directory and VMware.
• Integration services: Logic Apps, Service Bus and Event Grid.
• Public sector: Experience in New Zealand government environments and with NZISM or similar frameworks.

• Strong ownership and accountability, staying calm and methodical during major incidents.
• Clear written and verbal communication with both technical and non-technical stakeholders.
• An automation-first, continuous-improvement mindset and a habit of documenting and sharing knowledge.
• Willingness to coach and support other engineers.

• Bachelor's degree in Information Technology, Computer Science, Engineering, or equivalent practical experience.
• Microsoft Certified: Azure Administrator Associate (AZ-104), or equivalent hands-on experience.
• Desirable: Azure Security Engineer Associate (AZ-500), Azure Network Engineer Associate (AZ-700), DevOps Engineer Expert (AZ-400), HashiCorp Terraform Associate or ITIL 4 Foundation.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.