Senior Azure Consultant

Start: ASAP, or by agreement
Duration: 3–6 months, with the possibility of extension
Scope: 100%
Location: Kløfta (50% onsite)
Application deadline: ASAP

Background
On behalf of our client, we are looking for an Azure consultant.

Desired skills and experience:

The following Azure-related skills are desired, with area 2, 3, and 4 being especially prioritized:

1. Azure Virtual Desktop (AVD) – Intune Managed / Entra ID Joined

• Extensive hands-on experience designing, deploying, and operating cloud-only AVD environments using Entra ID Join and collaborating with our Intune manager.
• Deep knowledge of both personal and shared host pool architecture, scaling automation, session host tuning, FSLogix, and lifecycle management.
• Proficient in optimizing VM workloads, and networking.
• Expert troubleshooting across identity, networking, profiles, and session host issues.

2. Azure Network & Security Core

• Advanced experience with Azure Firewall (TLS inspection, DNAT/SNAT, rule collections), deployment via Firewall Manager, and Virtual WAN Secure Hub integration.
• Skilled in end-to-end troubleshooting of routing, DNS, performance, and logging.
• Proven ability to design global distributed landing zones with Azure Virtual WAN, integrating VPN, SD-WAN, third-party VPN clients and Cloudflare zero thrust
• Experience in Secure Hub deployments, routing policies, high availability, and failover scenarios.

3. Azure Governance & Enterprise Architecture

• Ability to design and implement Management Group hierarchies aligned with Landing Zone and CAF best practices, including segmentation of core services, AVD workloads, integration workloads, production/non-production, and global/regional alignment.
• Strong hands-on experience authoring custom Azure Policies and Initiatives (JSON), assigning at correct scopes, and implementing security baselines, tagging, location restrictions, compliance reporting, and policy remediation.
• Skilled in onboarding subscriptions under correct Management Groups, configuring RBAC, cost management, budgeting, monitoring, Private DNS, networking baselines, resource organization, and naming standards, and integrating subscriptions with Zero Trust and networking architecture.

4. Azure Integration Services

• Guiding external developers and ensuring Logic Apps workflows follow enterprise standards for resilience, security, and operability.
• Verifying Azure Functions designs (HTTP, Timer, EventGrid, ServiceBus) with secure authentication via Managed Identity and Key Vault, and ensuring they meet operational and performance requirements.
• Owning the security architecture for Azure Key Vault, Managed Identities, Private Link, RBAC, and audit controls to ensure long-term safe operation.
• Implementing Application Insights observability (tracing, metrics, dashboards, KQL) to ensure integrations are fully monitorable and supportable in production.
• Securing and configuring Email Communication Services (ACS/SMTP relay) to meet enterprise reliability, authentication, and monitoring requirements.

5. General Architecture & Delivery Skills

• Proven ability to design and deliver complete secure Azure Landing Zones (Management Groups, Subscriptions, Networking, Policy, Security baseline).
• Experience producing enterprise-level architecture documentation and delivering repeatable deployments.
• Knowledge of GDPR compliance and EU data residency requirements.
• Ability to transfer knowledge to internal teams, build operational documentation, runbooks, and automated guardrails.

Application process
Express your interest by sharing your CV to helene.roste@witted.com.