Azure Specialist

**ROLES**

**Compute**
- Work with the vendor on the provisioning and configuration of Azure Virtual Machines implemented by the vendors, ensuring correct OS setup, availability zones, and backup policies are implemented.
- Ensure vendors perform timely OS patching, antivirus updates, and VM health checks.
- Validate that vendors perform timely OS patching, antivirus updates, and regular VM health monitoring.
- Review the implementation of Azure Monitor, Log Analytics, and alerting mechanisms across VMs, storage, and networking.

**Database & Storage**
- Work with the vendor and manage the provisioning, tuning, and backup of Azure SQL Databases.
- Review database performance monitoring, index optimization activities, and storage planning conducted by vendors.
- Coordinate and validate database migration activities to Azure, including performance validation and backup testing.

**Migration**
- Work with vendors to conduct Azure Migrate assessments, H execution, and post-migration validations.
- Review and validate rollback plans, snapshot creation, and recovery testing.
- Ensure readiness checks and successful validation prior to migration cutovers.

**Networking**
- Work with the vendor on the design and management of VNets, subnets, and etc. configurations.
- Coordinate the implementation of VPN Gateways (site-to-site and point-to-site) and Virtual WAN optimizations, if necessary.
- Validate DNS resolution setups, routing configurations, and IP planning.
- Review Azure ExpressRoute requirements and configuration, if applicable

**Security**
- Work with the vendors on configure DDOS Protection, Azure Firewall, NAT Gateways, and Application Gateways.
- Review security architecture and ensure alignment with organizational security policies.
- Verify NSGs (Network Security Groups) for VMs are properly configured (allow only required ports).
- Ensure use of Azure Key Vault for sensitive data like DB passwords.
- Validate that SAP B1 services and SQL are encrypted using TLS 1.2
- Vulnerability scanning, review and remediation

**Storage**
- Work with the vendor on configuration and monitoring of Azure Disk Storage and storage tiers.
- Manage backup and restore strategies, including planning for Azure Archive Storage adoption for long-term retention.

**Azure Site Recovery**
- Work with the vendor on the setup of disaster recovery solutions, including replication of Azure virtual machines to secondary regions.
- Ensure testing and validation of automatic failover and failback procedures.

**Identity and Access Management (IAM)**
- Review and validate Azure Active Directory (AAD) setup (users, groups, roles).
- Ensure Role-Based Access Control (RBAC) is properly configured (principle of least privilege) or Privileged Identity Management if possible.
- Coordinate implementation of Conditional Access Policies for secure authentication.
- Implement Multi-factor Authentication (MFA) for all accounts

**Backup and Recovery Strategy**
- Work with the vendor on comprehensive backup plans (VMs, SQL databases, configuration states).
- Validate test restorations periodically (to make sure backups are recoverable).

**Monitoring and Performance Tuning**
- Work with the vendor on Azure Monitor, Application Insights, and Log Analytics are fully configured, if it is applicable.
- Review performance baselines post-migration (memory, CPU, disk I/O).
- Fine-tune resources after migration if over/under-provisioned (e.g., resize VMs).
- Monitor Azure consumption vs. budget (Cost Management & Optimization)
- Azure Advisor recommendations review and remediation
- Azure resource tagging

**Testing and Validation**
- Validate latency, connectivity, and performance for Singapore users after migration.
- Plan controlled UAT (User Acceptance Testing) before going live.

**Documentation**
- Ensure full documentation is delivered by vendors (network diagrams, VM specs, backup plans, runbooks, ASR plans, etc)
- Maintain updated system architecture and support documentation for post-migration operations.
- Admin training and knowledge transfer from vendor

**ACCOUNTABILITIES**

**Project Execution and Delivery**
- Ensure all Azure resources for SAP B1 are successfully provisioned, migrated, and operational within the agreed timeline and scope.

**Identity and Access Management**
- Ensure Azure Active Directory (AAD) structure, Role-Based Access Control (RBAC), and Conditional Access Policies are correctly implemented and secure.

**Compute and Storage Readiness**
- Validate that Azure Virtual Machines, storage accounts, disks, and backup policies are properly configured, aligned with SAP B1 performance and availability requirements.

**Database Setup and Performance**
- Ensure Azure SQL Database (or SQL on VM) is properly provisioned, secured, tuned, and meets SAP B1's technical requirements.

**Backup and Disaster Recovery**
- Ensure complete and tested backup and disaster recovery strategies are in place (VMs, databases, configurations).

**