Azure Integration & Automation Engineer

W2 Contract

Pay Rate: $100 - $130 per hour

Location: Redwood City, CA - Hybrid Role

Job Summary:

We are seeking a seasoned and innovative contract Azure Integration & Automation Engineer to implement and operationalize Azure integration capabilities supporting business and IT system integrations and workflow automation. This role will build secure, observable, and supportable integrations using Azure API Management, Azure Key Vault, Azure Logic Apps, Azure Functions, and Azure Monitor / Log Analytics. You'll work closely with IT, Security, and business application owners to deliver scalable patterns, reusable assets, and production-ready deployments.

Duties and Responsibilities:

• Within the first 6–12 months, you will help deliver a production-ready Azure integration runtime with standardized deployments (IaC), networking, security controls, and monitoring.
• API Management is configured for internal/external consumers with consistent policies (auth, throttling, transformation, logging).
• Secure secrets and credential management with Key Vault and rotation-friendly patterns.
• Multiple end-to-end integrations/automations using Logic Apps + Functions (batch + event-driven where appropriate).
• Centralized logging, dashboards, and alerting via Log Analytics / Azure Monitor, enabling audit-ready observability.
• A lightweight set of integration standards (naming, tagging, error handling, retry patterns, kill-switch/disablement patterns, runbooks).
• Design and implement integration workflows across SaaS/business systems using Logic Apps and Azure Functions.
• Build, publish, secure, and manage APIs using Azure API Management (APIM):
• API versioning, product/subscription setup, and developer onboarding guidance
• Policies for authentication/authorization, IP filtering, throttling/quotas, transformation, and caching (as needed)
• Implement secrets management using Azure Key Vault:
• Secret references from Logic Apps/Functions/APIM
• Support rotation patterns and least-privilege access
• Develop Azure Functions for transformation, enrichment, orchestration helpers, custom connectors, and lightweight services.
• Implement standardized error handling, retries, dead-letter/exception capture patterns, and idempotency where required.
• Apply secure-by-default practices: managed identities, RBAC, least privilege, network controls (where applicable), and policy enforcement.
• Implement logging/monitoring/alerting with Log Analytics and Azure Monitor:
• End-to-end tracing/correlation IDs across APIM → Logic Apps → Functions
• Dashboards for failures, latency, throughput, and dependency errors
• Create runbooks, operational playbooks, and handoff documentation for support teams.
• Establish reusable patterns/templates (e.g., standard Logic App skeleton, Function app baseline, APIM policy snippets).
• Implement Infrastructure as Code (IaC) for repeatability and environment promotion (Dev/Test/Prod).
• Partner with stakeholders to define integration requirements, SLAs, and support models.

Requirements and Qualifications:

• 5+ years in integration, automation, or cloud engineering, with 2+ years of hands-on Azure delivery.
• Proven experience with:
• Azure API Management (APIM) (policies, products/subscriptions, auth patterns)
• Azure Logic Apps (workflow design, connectors, error handling)
• Azure Functions (C#/.NET, Node.js, TypeScript, or Python)
• Azure Key Vault (secrets, certificates, managed identities)
• Azure Monitor / Log Analytics (KQL queries, alerts, dashboards)
• Strong understanding of integration fundamentals: REST/JSON, webhooks, auth (OAuth2, JWT, managed identity), retry/idempotency, message transformation.
• Experience delivering production systems with operational maturity (monitoring, alerting, runbooks).
• Familiarity with Jira and ServiceNow.

Preferred Qualifications:

• CI/CD (Azure DevOps or GitHub Actions), environment promotion, and release governance
• IaC: Bicep, Terraform, or ARM templates.
• Networking/security patterns: private endpoints, vNET integration, firewall rules (where needed).
• Enterprise integration patterns (sync/async, orchestration, event-driven).
• Familiarity with integrating business apps (e.g., Workday, NetSuite, ServiceNow, Microsoft 365/Teams, ADP, etc.).
• Experience in regulated environments (SOC 1/2, SOX, GxP) and audit-friendly logging practices.

Bayside Solutions, Inc. is not able to sponsor any candidates at this time. Additionally, candidates for this position must qualify as a W2 candidate.

Bayside Solutions, Inc. may collect your personal information during the position application process. Please reference Bayside Solutions, Inc.'s CCPA Privacy Policy at www.baysidesolutions.com.