Cloud Infrastructure Engineer III

<strong>AF Group (Lansing, Mich.) and its subsidiaries are a premier provider of innovative insurance solutions. Insurance policies may be issued by any of the following companies within AF Group: Accident Fund Insurance Company of America, Accident Fund National Insurance Company, Accident Fund General Insurance Company, United Wisconsin Insurance Company, Third Coast Insurance Company, or CompWest Insurance Company.</strong>

Lansing, USA

AF Group

<p class="p1"><strong>AF Group&rsquo;s focused and passionate team uses industry-leading best practices, analytics and resources to manage risk and minimize loss for our policyholders while strengthening businesses with our valued independent agent partners.</strong></p> <p class="p1"><strong>We strive to continuously increase the long-term value of our organization by outperforming our industry peers and fostering a culture of underwriting and claims excellence.</strong></p> https://www.afgroup.com/

keywords: summary,job description,compensation,quality assurance,management,teamwork,assist,technical,analysis,education,experience,proficiency

Non-Manager

Competitive Compensation and Benefits Package

Overview: This individual will primarily focus on implementing Azure-based cloud solutions, using Infrastructure-as-Code (IaC) tools like Terraform, while also serving as an escalation point for troubleshooting and resolving complex infrastructure-related issues. The ideal candidate will have deep expertise in Azure cloud networking, virtualization, DevOps practices, and Identity and Access Management (IAM). You will work closely with DevOps teams to implement Terraform modules for Azure, assist in cloud migrations to Azure, and manage Role-Based Access Control (RBAC) to secure Azure resources. This role provides an opportunity to play a critical part in building scalable, secure, and automated cloud solutions on Microsoft Azure.<br /><br /><br /> <p><strong>WORKING CONDITIONS</strong>&nbsp;<br /><br />Work is performed in an office setting with no unusual hazards.&nbsp;<br />&nbsp;</p> <p><strong>PAY RANGE</strong></p> <p><em>Actual compensation decision relies on the consideration of internal equity, candidate&rsquo;s skills and professional experience, geographic location, market and other potential factors. It is not standard practice for an offer to be at or near the top of the range, and therefore a reasonable estimate for this role is between $80,900 and $211,900.</em></p>
Responsibilities: <ul> <li>Design, deploy, and manage infrastructure on Azure, focusing on scalability, security, and automation.</li> <li>Use Terraform and other Infrastructure-as-Code (IaC) tools to implement and manage Azure cloud resources, ensuring modularity, reusability, and ease of consumption by other teams.</li> <li>Assist in cloud migration projects from on-premises and other cloud platforms to Microsoft Azure.</li> <li>Implement and manage Azure networking solutions, including Virtual Networks, ExpressRoute, VPN Gateways, and network security.</li> <li>Configure and manage Virtual Machines (VMs), scaling, and performance optimization within Azure.</li> <li>Implement Role-Based Access Control (RBAC) policies and ensure proper Identity and Access Management (IAM) practices across Azure resources.</li> <li>Configure and manage Azure AD roles, Custom RBAC roles, Azure AD Groups, and Conditional Access policies to enforce least-privilege access control for users and applications.</li> <li>Collaborate with security teams to enforce access control policies for sensitive resources and align with organizational security and compliance requirements.</li> <li>Serve as an escalation point for complex cloud infrastructure issues and troubleshoot problems related to Azure resources, networking, VM performance, and PaaS offerings.</li> <li>Provide root cause analysis and post-mortem documentation for major incidents and failures.</li> <li>Partner with DevOps teams to integrate Azure infrastructure into CI/CD pipelines, ensuring automation and efficient provisioning of resources using IaC.</li> <li>Assist in implementing Azure DevOps or GitHub Actions to automate infrastructure provisioning, deployments, and monitoring.</li> <li>Experience with Windows Server administration, including Active Directory, Group Policy Objects (GPO), DNS, and DHCP.</li> <li>Expertise in diagnosing and resolving complex infrastructure issues across cloud and on-prem environments.</li> <li>Knowledge of Azure Security Center, Azure Sentinel, and security best practices to monitor and secure Azure resources.</li> </ul>
Requirements: <p><strong>EDUCATION</strong></p> <ul> <li>Bachelor's degree in computer science, information technology, or related field required.</li> <li>Certification or progress toward certification of, industry-recognized professional designation preferred and encouraged.&nbsp;</li> <li>Combinations of relevant education and work experience may be considered in lieu of a degree.</li> <li>Continuous learning, as defined by Company&rsquo;s learning philosophy, is required.&nbsp;</li> </ul> <br /> <p><strong>EXPERIENCE</strong></p> <ul> <li>7 years&rsquo; experience within an IT environment which provides the necessary skills, knowledge and abilities.</li> <li>Experience within the insurance industry highly preferred.</li> </ul> <br /> <p><strong>QUALIFICATIONS&nbsp;</strong></p> <ul> <li>5+ years&rsquo; experience in the implementation, and maintenance of enterprise-level systems in Azure.</li> <li>7+ years' experience with administering Windows Server OS.</li> <li>8+ years' experience with administering Active Directory, GPO, DNS.</li> <li>3+ years' experience working with Linux servers.</li> <li>3+ years' experience working with Kubernetes and containerized solutions.</li> <li>Experience in a large complex enterprise environment, preferably in Healthcare, Insurance, or a similarly government-regulated environment.</li> </ul>