Azure Environment Review & Optimization

Job ID: 39588493

Budget: $25 – $50 USD

Azure Architecture Review & Optimization – Discussion Notes
Objective
Review existing Azure environment to ensure:

Correct setup and efficiency

Compliance with Azure best practices

Optimal performance and scalability for mass user adoption

Increased Azure Secure Score and improved security posture

Environment Overview
Azure environment with:

Azure Pipelines for deployments

Azure Portal components:

Kubernetes clusters

Azure App Services

Application is internet-facing but currently has limited users.

Mature system aiming for readiness for larger customer base.

Current Status
Pipelines and application functioning well.

Code quality verified via SonarCloud and Azure Defender for GitHub.

Azure Advisor Recommendations need to be addressed.

No existing architecture diagram.

Key Requests
Review and remediate Azure Advisor and Security Center recommendations.

Optimize environment architecture with best practices, focusing on:

Security (Private Endpoints, Identity Protection, MFA, Conditional Access)

Scalability

Infrastructure as Code (IaC) & Automation

All resources to be deployable via Pipelines & IaC, avoiding manual portal setups.

Scope includes:

Azure Advisor

Security Center

Azure Defender

Entra ID (Identity Score, Authentication Best Practices)

Focus on both production and development subscriptions.

Target to make environment ready for commercial-grade usage.

Working Model
Azure consultant to:

Review & remediate Azure recommendations.

Redesign infrastructure where needed, possibly requiring re-deployment or SKU upgrades.

Use Azure CLI and Pipelines as applicable.

Modify Kubernetes YAML files if necessary.

Provide optimal architecture for current and future scaling needs.

Consultant to collaborate with in-house full-stack developer (intermediate-level Azure skills but very strong in app code).

Consultant will coordinate directly with developer and project owner.

Work will be executed over Microsoft Teams with shared documentation and planning.