Senior Azure Infrastructure & Security Engineer

Compensation: ₹50,000 – ₹70,000 • No equity

Senior Azure Infrastructure & Security Engineer

• Contract duration: 6 months
• Working arrangement: Full-time
• Location: Remote, India
• Experience: 5+ years of relevant experience
• Focus: Azure, Azure Virtual Desktop, Networking, Identity and Endpoint Security

About Jobrooms

Jobrooms is building a next-generation platform that connects people with immediate work opportunities, healthcare and wellness services, and professional expertise through live audio and video interactions.

We are a growing startup focused on speed, accessibility, trust, and meaningful real-time human connection.

About the Role

We are looking for an experienced Senior Azure Infrastructure & Security Engineer to assess, design and secure our company infrastructure, including our existing Azure Virtual Desktop environment, Azure resources, company laptops and desktops, and internal networks.

This is a hands-on role combining infrastructure architecture, implementation, troubleshooting and technical guidance. You will protect company source code and sensitive information while enabling productive development and remote working.

You will work closely with engineering and leadership to prioritise improvements, implement security controls, validate their effectiveness and establish clear operating procedures.

Responsibilities

• Assess the existing infrastructure, document configurations and dependencies, and produce a prioritised security improvement plan.
• Design a practical infrastructure architecture covering Azure, AVD, identity, company devices, office networks and remote access.
• Secure and manage AVD host pools, session hosts, images, FSLogix profiles, application access and session policies.
• Configure Microsoft Entra ID, SSO, MFA, Conditional Access, role-based permissions and privileged access.
• Establish secure employee onboarding and offboarding, separate administrator accounts and controlled emergency access.
• Design and configure VNets, subnets, routing, NSGs, firewalls, VPNs, private endpoints and private DNS.
• Secure company laptops and desktops through Intune, device compliance, encryption, patching, application controls and local administrator restrictions.
• Design secure office connectivity, including firewalls, managed switches, Wi-Fi and network segmentation.
• Restrict personal accounts and unapproved repositories, storage platforms, applications and services within managed environments.
• Implement controls to reduce unauthorised source-code and file transfers through clipboard, local drives, USB, printing, browser uploads and other supported channels.
• Assess and control access to unapproved AI services, IDE extensions, terminals and APIs while preserving approved development workflows.
• Secure GitHub and Azure access from approved environments and validate access restrictions.
• Configure endpoint protection, appropriate DLP controls, centralised logging, monitoring and actionable security alerts.
• Implement backup, recovery and incident-response procedures, including restoration testing.
• Automate infrastructure and configuration changes where appropriate, with version control and rollback procedures.
• Deliver architecture diagrams, configuration documentation, cost estimates, recorded limitations and administrator training.

Required Skills

• 5+ years of relevant experience in infrastructure, cloud, networking or security engineering.
• Proven hands-on experience securing production Microsoft Azure and Azure Virtual Desktop environments.
• Strong networking knowledge covering TCP/IP, DNS, routing, VPNs, firewalls, network segmentation and private connectivity.
• Strong Windows administration and session-host hardening experience.
• Practical experience with Microsoft Entra ID, MFA, Conditional Access and least-privilege access.
• Hands-on experience with Microsoft Intune, device compliance, endpoint configuration and application management.
• Experience deploying and operating endpoint protection such as Microsoft Defender for Endpoint or CrowdStrike.
• Experience with data protection, managed browser policies, secure web gateways and outbound access controls.
• Understanding of GitHub access security and common source-code exfiltration paths.
• Experience with logging, security investigations, backup and recovery.
• Ability to test controls across supported clients and applications, document limitations and troubleshoot without disrupting essential workflows.
• Strong documentation, communication and independent delivery skills.

Preferred Skills

• Terraform or Bicep, PowerShell and GitHub Actions.
• Microsoft Purview DLP, Microsoft Sentinel and Defender for Cloud.
• Azure landing zones and Zero Trust architecture.
• Office network implementation, including managed switches, VLANs and enterprise Wi-Fi.
• Experience securing developer workspaces and hybrid infrastructure.
• Relevant Microsoft Azure, security, networking or endpoint administration certifications.

Expected Contract Deliverables

• Current-state infrastructure inventory and prioritised risk assessment.
• Target architecture and phased implementation plan.
• Implemented and tested security improvements.
• Evidence of access-control, data-transfer, alerting and recovery tests.
• Infrastructure diagrams, operating procedures and configuration records.
• Administrator handover, team training and ongoing maintenance recommendations.

Why Join Jobrooms?

Own the security and infrastructure foundations of a growing company, work directly with engineering and leadership, and make a direct contribution to protecting company intellectual property.

Contract extension may be available based on performance and business requirements.

How to Apply

Submit your CV, availability, expected compensation and a brief summary of relevant Azure, AVD, networking and endpoint security projects.

Please highlight infrastructure you personally designed and implemented, security controls you validated, and your experience protecting source code and managing company devices.