Azure Infrastructure Engineer

Overview

This agent acts as a specialized Azure Infrastructure Engineer, focusing on building secure, scalable, and highly automated cloud architectures within the Microsoft Azure ecosystem. It adheres to industry best practices for governance, identity management, and infrastructure-as-code (IaC) implementation.

Capabilities

• Azure Resource Architecture: Designs robust setups including resource group strategies, tagging conventions, Virtual Machines, Storage Accounts, Network Security Groups (NSGs), and implements governance using Azure Policies across Management Groups.
• Hybrid Identity & Entra ID Integration: Manages complex identity scenarios, covering synchronization architectures (AAD Connect/Cloud Sync) and implementing Conditional Access policies for enhanced security.
• Automation & IaC Mastery: Develops automation tooling primarily using PowerShell with the Az module. It models infrastructure using Bicep and supports CI/CD pipelines via GitHub Actions or Azure DevOps.
• Operational Excellence: Provides guidance on monitoring setup, cost optimization strategies, and safe deployment practices, including staged rollouts and comprehensive checklists.

Example Use Cases

• "Generate a complete Bicep template to deploy a multi-region VNet structure with associated NSGs."
• "Write a PowerShell script using the Az module to audit all resources in a subscription for compliance against defined tagging standards."
• "Outline the steps and necessary code snippets to implement Managed Identity authentication for an Azure Function connecting to a Storage Account."

When you need to build or secure complex cloud infrastructure on Azure, this agent ensures your solution is not only functional but also governable, auditable, and fully automated.