Operations Management Professional - Azure Platform Specialist

About Lenovo

Lenovo is a global technology leader with a revenue of US$83 billion, listed #153 on the Fortune Global 500. Operating in 180 markets, Lenovo delivers innovative AI-enabled and optimized technology products, including PCs, workstations, smartphones, tablets, cloud infrastructure, and software solutions. Committed to building a more inclusive and advanced future through continuous investment in innovation, Lenovo is publicly traded on the Hong Kong stock exchange (HKSE: 992).

Key Responsibilities

• Lead daily Level 2 Azure platform operations across core services such as Virtual Machines, Virtual Networks, Load Balancers, App Services, Azure Kubernetes Service, Storage, Key Vault, SQL Managed Instance, Backup, and Azure Site Recovery.
• Manage incident triage and conduct Level 2 and Level 3 troubleshooting using tools like Azure Monitor, Log Analytics, Application Insights, and Microsoft Sentinel.
• Conduct root cause analysis, apply corrective and preventive measures, and maintain updated runbooks and standard operating procedures.
• Act as the primary technical escalation contact for junior engineers and operations teams.
• Develop and sustain infrastructure as code deployments using ARM templates, Bicep, and Terraform, including reusable modules and integration with CI/CD pipelines.
• Enhance automated pipelines with Azure DevOps and GitHub Actions for building, testing, deployment automation, and policy enforcement.
• Manage hardened VM image baselines, extensions, diagnostics configurations, and lifecycle updates of operating systems.
• Implement and maintain governance and compliance policies using Azure RBAC, Privileged Identity Management, Azure Policy, management groups, subscription standards, and identity controls via Entra ID.
• Ensure tagging, naming conventions, backup, and disaster recovery compliance across cloud environments.
• Support security operations including Defender for Cloud, remediation of vulnerabilities, endpoint protection, audit participation, and compliance reporting.
• Maintain regulatory and governance documentation such as baselines, patching records, access reviews, and cost attribution reports.
• Support advanced networking engineering by troubleshooting VNets, subnets, network security groups, Azure Firewall, Private Endpoints, Application Gateway with Web Application Firewall, and network diagnostics.
• Assist in designing and maintaining hybrid connectivity solutions such as ExpressRoute, VPNs, Private Link, and service endpoints in line with Cloud Adoption Framework standards.
• Analyze cloud resource utilization and recommend cost-optimization strategies including rightsizing, reserved instances, and savings plans.
• Perform performance assessments of compute, storage, and network resources, contributing to capacity planning activities.
• Collaborate closely with application, DevOps, security, and operations teams to meet service level agreements and minimize repetitive incidents.
• Provide mentorship to junior engineers and contribute to maturity of operational processes.
• Produce thorough documentation, knowledge base articles, automation scripts, and engineering standards.
• Facilitate cloud service onboarding and enablement of new workloads on the platform.

Required Qualifications and Skills

• 4 to 6 years of hands-on experience in cloud infrastructure and operations, with a strong focus on Microsoft Azure technologies.
• Comprehensive expertise in Azure core services including networking components, virtual machines, storage solutions, key vaults, identity and access management, monitoring, backup, and disaster recovery.
• Strong scripting and automation skills using PowerShell and/or Python.
• Proficiency in infrastructure-as-code with ARM templates, Bicep, or Terraform alongside Git-based continuous integration and deployment workflows.
• Deep understanding of Entra ID, Privileged Identity Management, least-privilege access models, and security baselines.
• Experienced in log analytics with Kusto Query Language, Microsoft Sentinel, Defender for Cloud, and vulnerability management.
• Proven capability to troubleshoot across multiple domains including compute, storage, network, and cloud platforms.
• Familiar with Azure landing zones, Cloud Adoption Framework (CAF), policy-driven governance, and subscription management architectures.
• Hands-on experience with containers, Azure Kubernetes Service, Application Gateway with WAF, Private Link, Azure Site Recovery, and Azure Backup.
• Knowledgeable about cost management frameworks such as tagging strategies, budgeting, and showback or chargeback models.
• Excellent communication abilities with experience leading small technical projects.

Preferred Certifications

• Microsoft Certified: Azure Administrator (AZ-104)
• Microsoft Azure Security Engineer (AZ-500) or Identity Engineer (SC-300)
• HashiCorp Certified: Terraform Associate
• Microsoft Azure Solutions Architect (AZ-305) (optional but advantageous)

Equal Opportunity Employer Statement

Lenovo is committed to equal employment opportunities without discrimination based on race, color, gender, age, religion, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected classification under local laws.