HIRING || Senior (VM) Platform and Automation Engineer || LATAM

:

VM Infrastructure & Security Profile:

- Hands-on experience with VM SKUs/sizing, Availability Zones, Azure Compute Gallery (Shared Image Gallery), Trusted Launch (vTPM, Secure Boot), Ephemeral OS Disks, and Disk Encryption (Encryption at Host / ADE).
- Disaster Recovery (ASR): Building and testing Azure Site Recovery (ASR) replication policies, failover/failback runbooks, and recovery drills across regions or zones.
- Backup & Recovery: Setting up Azure Backup (Recovery Services Vaults, backup policies) and conducting VM restore/recovery drills (disk/file-level restores, point-in-time recovery).
- Licensing & Cost Controls: Applying Azure Hybrid Benefit (AHB) for Windows Server and RHEL, managing capacity reservations, and handling BYOS image licensing.

Azure Security, Identity & Networking
- Entra ID (Azure AD) & RBAC: Configuring Entra ID VM join (hybrid/cloud-native), Role-Based Access Control, Privileged Identity Management (PIM / JIT access), and Managed Identities.
- Network Security: Designing and automating Network Security Groups (NSGs) and Application Security Groups (ASGs) for workload segmentation, host-level firewall policies, and Private Endpoints.
- Secure Operational Access: Azure Bastion for agentless RDP/SSH access without public IP exposure.
- Key Vault Integration: Familiarity with Azure Key Vault for secrets, certificates, and disk encryption key management tied to VM workloads.

Azure Monitor & Observability
- Metrics & Telemetry: Deep understanding of core VM performance and health metrics (CPU utilization, Memory commit/working set, Disk IOPS/throughput,



Network ingress/egress, Heartbeat).
- Observability Architecture: Hands-on experience with Azure Monitor, Log Analytics workspaces, Azure Monitor Agent (AMA) deployment, Data Collection Rules (DCRs), VM Insights, and configuring Azure Monitor Alert Rules & Action Groups. 4. Azure Governance, Landing Zones & Networking.
- Governance & Policy: Enforcing Azure Policy (custom and built-in definitions for VM compliance, allowed SKUs, mandatory extension enforcement, tag policies), Management Group hierarchy, and subscription quota limits.
- Landing Zone Fundamentals: Understanding of hub-spoke / vWAN topology, subscription vending, and how VM workloads fit within an enterprise Azure Landing Zone. OS Dual OS Proficiency.
- Windows Server (2022/2025): WinRM configuration, PowerShell scripting, Active Directory / Entra ID join, Windows Firewall, and OS hardening baselines.
- RHEL (9/10): Red Hat Satellite registration/subscription management, SELinux, firewalld, systemd service management, and CIS Linux hardening. DevOps Ansible Core & Automation (Primary Technical Focus) .

MUST HAVE
- Ansible Role & Playbook Development: Expert in authoring modular, production-ready, idempotent Ansible roles and playbooks for both Linux and Windows environments.
- Translating Admin Specs: Ability to intake operational requirements from Windows and RHEL system administrators and convert them into clean Ansible automation artifacts.
- Role Testing Framework (Molecule): Setting up a greenfield role

Must Have Skills:
- Ansible
- Azure DevOps
- Azure Networking
- Microsoft Azure
- Platform Engineering
- Terraform

📌 Platform Engineer (México)
🏢 Pyramid Consulting
📍 México