Azure IoT Cloud Infrastructure Specialist
Role Summary
Serve as a technical advisor and subject matter expert for global smartbuilding portfolio, with a focus on secure IoT / OT networking, Azure integration, identity / SSO, and operational resilience. You will not implement changes directly; instead, you will triage issues, guide architecture and security decisions, lead riskmitigation strategies, and equip internal teams and partners through documentation, training, and governance.
Key Responsibilities
IoT / OT Network & Security Advisory
- Technical triage : Rapidly assess questions or incidents to distinguish network vs. device vs. cloud causes; recommend next steps and owners.
- Advise on segmentation, encryption, and firewall policies for IoT / OT environments; define guardrails that balance safety, availability, and security.
- Design secure dataflow patterns (edge gateways cloud) and certificate / credential handling approaches appropriate for constrained OT devices.
- Produce risk assessments and mitigation plans for new integrations, vendor connections, and intersite traffic; track risks to closure.
Azure Platform & Enterprise Integration (Advisory)
Guide solution patterns across Azure IoT Hub, Device Provisioning Service (DPS), IoT Edge, Azure Digital Twins, and related telemetry / analytics services.Advise on identity and SSO using Microsoft Entra ID (Azure AD) and modern auth flows; define leastprivilege controls and conditional access guardrails.Define secure onboarding and offboarding patterns for devices and applications; recommend resilience / failover and rollback strategies.Smart Building Systems Oversight
Provide technical insight into BAS / BMS, Environmental, People Density, occupancy, parking, digital signage and other Commercial & Industrial IoT systems and their integration with Azure IoT platforms.Validate data integrity and performance through telemetry reviews, dashboards, and controlled tests; recommend tuning, buffering, and retry patterns.Deliver stakeholder presentations that explain how building systems map to network and cloud architectures, highlighting operational and security implications.Troubleshooting, Triage & Escalation
Act as a Tier3 escalation point for complex IoT / OT connectivity and platform issues; perform deep diagnostics (logs, packet captures, edge / cloud traces).Lead root cause analysis (RCA) and write clear postincident reports with preventive actions, ownership, and timelines.Run knowledgetransfer sessions and postincident reviews to build field / vendor capabilities and reduce repeat occurrences.Lifecycle & Preventative Maintenance
Support lifecycle planning for firmware, certificates / keys, controller upgrades, and network segmentation milestones.Partner with field teams and vendors to align preventative maintenance with uptime / SLA and security objectives; recommend proactive riskreduction actions.Standards, Training & Documentation
Define onboarding requirements for IoT / OT solutions (compliance checks, service mapping, ops readiness).Own and maintain KBAs, runbooks, RACIs, workflows, and architecture patterns; ensure global applicability and version control.Create and deliver training modules and technical presentations for networking, operations, and app teams, measure adoption.Global Project Support & Governance
Contribute to project scope, risk identification, acceptance criteria, and Key Performance Indicator (KPI) Objective and Key Results (OKR) definitions for global rollouts.Facilitate risk workshops and status readouts; provide executivelevel presentations on readiness, risk posture, and remediation progress.Coordinate across security, networking, facilities, and vendor teams to maintain alignment and accountability.Onsite Technical Liaison (Hybrid)
Attend onsite tests, commissioning events, device reviews, and vendor alignment meetings; provide realtime triage and decision support.Capture onsite findings and convert them into updated standards, patterns, and training content.Qualifications
IoT / OT networking, firewalls, and encryption : Strong grasp of routing, segmentation, VPNs / proxies, TLS / PKI, and secure edgetocloud patterns.Azure IoT expertise : Practical advisory experience across IoT Hub, DPS, IoT Edge, Azure Digital Twins, and telemetry / analytics pipelines.Identity & SSO : Handson advisory experience with Microsoft Entra ID (Azure AD), modern auth (OIDC / SAML / OAuth2), and leastprivilege access patterns.Troubleshooting & RCA : Demonstrated ability to lead deep diagnostics and produce clear, actionable RCAs with preventive controls.Smart building Information Gathering systems : Working knowledge Environmental, People Density, Parking and other various experiences.Risk mitigation & governance : Ability to produce risk registers, mitigation plans, acceptance criteria, and track to closure.Enablement skills : Excellent documentation, training, and presentation skills; ability to influence global stakeholders in a hybrid environment.