IT Infrastructure Engineer (Azure Focus)

Zehnder stands for energy-efficient products and solutions for a healthy and comfortable indoor climate to help to improve quality of life. The Zehnder Group produces and sells decorative radiators, as well as heating and cooling ceiling systems, comfortable indoor ventilation and air cleaning systems on an international level. As well as working together with our customers as an excellent team, we are dedicated, we radiate passion and we love what we do – all to ensure that we are always the number one choice among customers. As a leading innovator, we employ 4000 people globally. The slogan "always the best climate" also applies to the workplace at the Zehnder Group. The Zehnder Group’s thinking is long-term and sustainable. A healthy motivating working environment is the only way to achieve top performance in every area. We therefore want to recruit the best talent and at the same time promote from within and achieve mutual commitment.

This role is dedicated to the administration, engineering, and continuous development of Zehnder’s Azure environment at enterprise scale. The position focuses on Azure governance and platform management, networking and connectivity, hybrid identity and security, cloud operations, monitoring, automation, and cost optimization. The Azure platform is deeply integrated with on-premises infrastructure and hybrid services. Therefore, a strong background in traditional IT infrastructure (server platforms, virtualization, hybrid architectures) is essential. This is a hands-on, mid-to-senior technical role requiring a minimum of 5 years of experience in IT infrastructure, with proven responsibility for operating and improving complex Azure environments.

Your responsibilities

Azure Platform Administration:

• Operate and manage Azure subscriptions, resource groups, and core platform services in a multi-subscription, enterprise-scale environment.

• Design, implement and maintain Azure governance frameworks including management groups, RBAC, Azure Policies, tagging standards, compliance tracking.

• Develop, maintain and evolve Azure Landing Zone components aligned with enterprise and security requirements.

• Manage Azure networking including VNets, NSGs, routing, VPN gateways, ExpressRoute/VPN hybrid connectivity, private endpoints.

• Maintain high operational hygiene across the Azure platform: monitoring, alerting, baselines, lifecycle management.

  Infrastructure as Code & Automation:

• Design, deploy, and maintain Azure infrastructure using Infrastructure as Code (IaC) principles.

• Implement and operate IaC solutions using Terraform and/or Bicep (ARM templates).

• Ensure repeatable, version-controlled, and secure deployments across environments.

• Support integration of IaC with CI/CD pipelines and operational workflows.

• Use PowerShell and automation tools to reduce manual effort and improve reliability.

  Hybrid Identity & Cloud Security:

• Manage and maintain Entra ID (Azure AD) tenant configurations relevant to infrastructure and security.

• Support and operate the hybrid identity environment, including Azure AD Connect and synchronization health.

• Implement and maintain Conditional Access policies, MFA, identity security baselines, and access governance controls.

• Operate and support Azure Privileged Identity Management (PIM) for administrative access.

• Configure and maintain Microsoft Defender for Cloud and related security controls, in collaboration with the Security team.

• Apply Zero Trust principles and security-by-design practices across Azure services and integrations.

  Cloud Operations, Monitoring & Resilience:

• Design and operate Azure monitoring and logging using Azure Monitor, Log Analytics, and related services.

• Ensure visibility, alerting, and operational readiness for Azure workloads and platform services.

• Integrate Azure logs and signals with centralized monitoring and SIEM/SOC solutions where applicable.

• Proactively improve platform availability, resilience, and operational stability.

• Support incident analysis, troubleshooting, and post-incident improvement activities related to Azure services.

  Cost Management & Optimization (FinOps):

• Actively manage and optimize Azure costs using Azure Cost Management, budgets, alerts, and usage analysis.

• Identify cost optimization opportunities through architectural improvements, right-sizing, and lifecycle management.

• Promote cost transparency and accountability across Azure subscriptions and services.

• Balance technical design, security, and performance with cost efficiency.

  Collaboration, Support & Documentation:

• Provide 2nd / 3rd-level support for Azure-related topics.

• Maintain clear documentation, diagrams, standards, and operational procedures for the Azure platform.

• Collaborate closely with workplace, networking, and security teams.

Our requirements

• Minimum 5 years of experience in IT infrastructure roles, including hands-on Azure administration.

• Proven experience operating complex, enterprise-scale Azure environments (multi-subscription, hybrid).

• Strong hands-on experience with Azure governance, networking, monitoring, and identity services.

• Solid experience with Infrastructure as Code using Terraform and/or Bicep (ARM templates).

• Strong understanding of hybrid identity (Entra ID / Azure AD, Azure AD Connect).

• Hands-on experience with Azure security controls, including Defender for Cloud, PIM, Conditional Access, and MFA.

• Practical experience with PowerShell and automation in Azure environments.

• Background in Windows Server and/or Linux server administration and virtualization (Hyper-V, VMware).

• Understanding of cloud security principles, Zero Trust concepts, and enterprise governance models.

• Strong English communication skills, written and spoken.

• Preferred certifications: Azure Administrator (AZ104), Azure Security Engineer (AZ500), Windows Server Hybrid Administrator, Terraform Associate or equivalent cloud infrastructure certifications.

What we offer

• A hands-on senior technical role shaping the future of Zehnder’s global workplace platform.

• Real ownership and influence over modern endpoint and workplace architecture.

• A modern, cloud-focused environment with strong emphasis on Intune.

• International collaboration within a global organization.

• Competitive salary and benefits package.

• Continuous training, and professional development opportunities.

• Continuous professional development.

• Package of benefits: multisport card ; private medical care; flexible working time; fruits; corporate products and services at discounted prices; holiday funds; christmas gifts