IN-Sr Technical Consultant - Cloud - AKS, Azure update manager, Azure automation, Patching, AZ-104 / AZ-400

Scope: The Azure Infra Engineer - Patching & Maintenance keeps our Azure platform secure, current, and compliant by owning the end-to-end patch and maintenance lifecycle. This mid-level role runs the weekly patch cycle across compute, containers, and platform services, and proactively tracks every core component against vendor End-of-Life / End-of-Support timelines, upgrading to supported versions before support lapses. It is a hands-on operations role with a strong automation focus and close coordination with service owners, security, and DevOps.

Our current technical environment: Software: Azure Update Manager, Azure Automation, Azure Policy (Guest Configuration), PowerShell, Bash, and Azure CLI; ServiceNow for change management / CAB. Application Architecture : Microservices on AKS (Stratosphere), Portal Shell and Portal Collaboration runtimes, the Event Framework (Event Grid / Service Bus), IAM, and API Management (self-hosted gateway). Cloud Architecture : Microsoft Azure - Windows / Linux VMs, AKS node pools, MongoDB (Atlas), Entra ID / IAM, and APIM, with patch compliance and maintenance across every layer. Frameworks/Others : Kubernetes / Helm, Azure Monitor / Log Analytics, vulnerability & CVE remediation workflows, and EOL/EOS lifecycle tracking; WSUS / SCCM, Ansible / Terraform, and ITIL practices; AZ-104 / AZ-400 aligned.

What you’ll do: Plan and execute the weekly patch cycle for Windows/Linux VMs, AKS node pools, and platform middleware using Azure Update Manager and Azure Automation. Publish and maintain a rolling maintenance calendar, coordinating patch windows with service owners to minimise business disruption. Track OS, runtime, and dependency versions across IAM, APIM, MongoDB, Stratosphere, Portal Shell/Collaboration, and the Event Framework against vendor EOL/EOS timelines, and plan upgrade paths to supported or LTS versions well ahead of EOL. Test patches and upgrades in non-production and validate rollback procedures before every production rollout. Automate patch deployment and compliance reporting using Azure Update Manager, Azure Policy guest configuration, and Automation runbooks; monitor compliance dashboards and remediate non-compliant resources within SLA. Coordinate emergency, out-of-band patching for critical CVEs and zero-day vulnerabilities with the security team. Manage AKS cluster and node image upgrades, Helm chart bumps, and container base image refresh cycles; renew TLS certificates, keys, and secrets nearing expiry with the IAM team. Maintain patch and maintenance documentation (change records, rollback plans, validation checklists) and report weekly patch compliance and EOL risk status to engineering leadership.

What we are looking for: 5-8 years in infrastructure operations, patch management, or SRE roles, with proven ability to plan and execute maintenance windows at minimal service disruption. Hands-on experience with Azure Update Manager, Azure Automation, and Azure Policy guest configuration; patching Windows Server and Linux VM fleets at scale. Familiarity with AKS node image upgrades and Kubernetes version lifecycle management, plus EOL/EOS lifecycle tracking for OS, databases, and middleware. Experience with change management (ServiceNow CAB, scheduled maintenance windows) and vulnerability / CVE remediation workflows. Scripting skills in PowerShell, Bash, or Azure CLI for patch automation; AZ-104 or AZ-400 certification preferred. Nice to have: WSUS / SCCM, MongoDB Atlas automated upgrades, Ansible / Terraform, ITIL Foundation, and experience building EOL/EOS dashboards or CMDB integrations.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.