ABOUT US
Ensono is a hybrid IT services provider that sees a world in transformation. We understand the world of business has become more complex, layered, and interdependent because we’re enabling the IT infrastructure for that transformation. Our clients are some of the most innovative and forward-thinking companies in the world and we help keep their businesses thriving. With nearly 50 years of experience, we optimize and modernize IT infrastructure by amplifying the power of mainframes and mid-range servers with the agility of cloud. Check us out at www.ensono.com.
Job Summary
This role supports a mission‑critical Azure PaaS environment for the client as part of a dedicated Ensono support team. The position combines senior-level Azure engineering with operational responsibility, including request-based work, incident response, networking configuration, and change governance.
The successful candidate will work closely with the client’s application teams, network teams, and operations stakeholders to deploy, support, and maintain secure, highly available Azure PaaS platforms. This is a client-facing role requiring strong communication skills, operational discipline, and the ability to work across L1–L3 support activities within a single team model.
Job Responsibilities
Azure PaaS & Platform Operations
- Act as a lead engineer within a dedicated client support pod providing Azure PaaS and networking support.
- Provide day‑to‑day operational support for Azure PaaS environments across development, test, staging, and production subscriptions.
- Handle a request‑driven workload using ServiceNow, including standard changes, minor changes, and connectivity requests.
- Deploy, configure, and support Azure PaaS services including:
- Azure App Service (ASE v3, App Service Plans, Web Apps, Function Apps, App Slots)
- Azure Front Door, Application Gateway (v2), Web Application Firewall (WAF)
- Azure Service Bus, Event Hub, Logic Apps
- Supporting platform services such as Key Vault, Azure Monitor, Application Insights, Log Analytics, and Workbooks
Networking, Security & Connectivity
- Design, implement, and troubleshoot Azure networking components, including:
- Network Security Groups (NSGs) as a primary operational responsibility
- Virtual Networks, subnets, custom DNS, and VNet peering
- User Defined Routes (UDRs) for specialized connectivity scenarios
- Application Gateway, Load Balancers, Azure Front Door, and Traffic Manager
- Connectivity between Azure PaaS services, on‑premises systems, and external services via ExpressRoute
- Support TLS/HTTPS configurations, redirect rules, and secure ingress patterns in coordination with Mayo network and security teams.
- Troubleshoot complex connectivity issues involving Azure PaaS, on‑premises networks, and approved external services.
SQL Connectivity (Reduced Platform Ownership)
- Serve as a contributor for SQL connectivity enablement, including:
- NSG rule design and validation for Azure SQL Database and Azure SQL Managed Instance
- Updating Azure SQL firewall rules when required
- Supporting provisioning and decommissioning requests for Azure SQL Managed Instances
- Note: Core SQL platform administration and operations are supported internally by the client; this role focuses on networking, access, and integration enablement rather than database administration.
Operations, Governance & Support
- Participate in incident response and on‑call rotation aligned to business‑critical production systems.
- Troubleshoot and resolve incidents across L1, L2, and L3 infrastructure and platform support layers.
- Participate in Change Advisory Board (CAB) meetings, including standard and major change reviews.
- Ensure adherence to the client’s policies, security controls, architectural standards, and governance processes.
- Work with CI/CD pipelines and Infrastructure‑as‑Code (Terraform, Azure DevOps) to deploy and maintain standardized environments.
- Contribute to operational documentation, knowledge articles, and continuous improvement initiatives.
- Support audits, reviews, and compliance‑related requests when required.
- Mentor junior engineers and actively contribute to team knowledge sharing.
Mandatory Skills and Experience
- 5+ years’ experience supporting highly available, mission‑critical environments.
- 2+ years’ hands‑on experience engineering and supporting Azure platforms, with a strong focus on PaaS.
- Strong experience with Azure PaaS services (App Service, Functions, Front Door, Application Gateway, monitoring services).
- Solid understanding of Azure networking, including NSGs, TCP/IP, routing, ExpressRoute, and secure connectivity patterns.
- Experience working in a ticket‑driven operational environment (ServiceNow or equivalent).
- Experience supporting production systems with strict access controls and formal change management.
- Ability to work effectively across a blended L1–L3 support model.
- Experience with automation and IaC tools such as Terraform and Azure DevOps.
- Scripting experience in PowerShell, Python, or Bash.
- Familiarity with ITIL processes (incident, problem, and change management).
- Excellent written and verbal communication skills with a strong customer‑service mindset.
Preferred / Beneficial Experience
- Experience supporting regulated or healthcare environments.
- Exposure to containers, AKS, or modern CI/CD practices.
- Azure Associate or Professional certifications (current or in progress).
- Prior participation in CABs and formal governance forums.
Personal Attributes
- Independent, accountable, and self‑
- Comfortable balancing operational support and engineering work.
- Strong sense of ownership and customer focus.
- Desire to continually improve systems, processes, and personal
Shift timings
1:30 PM to 10:30 PM
We are an equal opportunity employer. All qualified applicants will be considered for employment without regard to caste, colour, creed, religion, gender, gender identity, sexual orientation, age, disability, HIV status, or any other status protected by law. Candidates with disabilities who require accommodations during the recruitment process are encouraged to contact our Talent Acquisition team to place a request.
