azure-infra-engineer Claude Code subagent for Azure

Q: How do I install azure-infra-engineer in Claude Code?

Add the marketplace with `/plugin marketplace add VoltAgent/awesome-claude-code-subagents`, then install the subagent with `/plugin install voltagent-infra@voltagent-subagents`.

What azure-infra-engineer does

This subagent helps plan resource groups, naming rules, tags, virtual machines, storage, networking, NSGs, and firewall settings. It also covers Azure Policies, management groups, and RBAC alignment with least-privilege access.

For hybrid identity, it works with AAD Connect, Cloud Sync, Conditional Access, service principals, and managed identities. It can shape PowerShell automation with the Az module, ARM or Bicep resource models, plus deployment pipelines in GitHub Actions and Azure DevOps.

Its deployment checklist includes validating subscription context, reviewing deployment previews, and documenting rollback or deletion paths. It uses Read, Write, Edit, Bash, Glob, and Grep; check that the agent can access the project and shell it needs.

What it helps with

design Azure networks with NSGs and routing
plan Entra ID integration and Conditional Access
model infrastructure with Bicep or ARM
automate Azure VM creation through PowerShell Az
audit Azure resources for cost and policy compliance

Example prompts for the agent

Design VNets, NSGs, and routing with Bicep and PowerShell.
Automate Azure VM creation across multiple regions.
Audit Azure resources for cost and compliance posture.

How to install azure-infra-engineer

1Plugin marketplace

/plugin marketplace add VoltAgent/awesome-claude-code-subagents

/plugin install voltagent-infra@voltagent-subagents

2Manually: put the files in place

.claude/agents/azure-infra-engineer.md

For all projects use ~/.claude/agents/. Claude delegates by the description field or an @-mention

Manually: put the files in place

.codex/agents/azure-infra-engineer.toml

Codex defines subagents in TOML: name, description, developer_instructions. Move the Markdown text into developer_instructions by hand. For all projects use ~/.codex/agents/

Manually: put the files in place

.cursor/agents/azure-infra-engineer.md

Cursor also reads .claude/agents/

From the same set129

The whole set →

frontend-developer VoltAgent Community Subagent for building complete frontend applications with React 18+, Vue 3+, and Angular 15+. Handles component architecture, state management, testing, and accessibility. Claude Code 40,905installs code-reviewer VoltAgent Community Reviews code changes for bugs, security flaws and maintenance issues. Use it before merging complex work or auditing a project. Claude Code 31,050installs fullstack-developer VoltAgent Community This subagent carries a feature across the database, API, and frontend layers. Use it when one change needs a consistent end-to-end implementation. Claude Code 18,117installs prompt-engineer VoltAgent Community This subagent designs, tests, and improves prompts for LLM production systems. Use it when prompts need evaluation, metrics, or cost tracking. Claude Code 16,078installs debugger VoltAgent Community Diagnoses software failures, reads stack traces, and isolates root causes to fix elusive bugs. Helpful when logs alone do not explain a crash. Claude Code 13,459installs python-pro VoltAgent Community A subagent for type-safe Python code across web APIs, system utilities, and complex applications. Use it when async patterns and broad type coverage matter. Claude Code 11,689installs security-auditor VoltAgent Community Audits security controls, vulnerabilities, risks, and compliance gaps across systems, infrastructure, and processes. Use it when you need documented findings. Claude Code 10,718installs context-manager VoltAgent Community Organizes shared context for multi-agent projects in files, including state, task history, and decisions. Use it when agents need a clear shared workspace. Claude Code 10,638installs

Questions about azure-infra-engineer

How do I install azure-infra-engineer in Claude Code?

Add the marketplace with /plugin marketplace add VoltAgent/awesome-claude-code-subagents, then install the subagent with /plugin install voltagent-infra@voltagent-subagents.

What does azure-infra-engineer do?

It designs, deploys, and manages Azure infrastructure. Its scope includes network architecture, Entra ID, PowerShell automation, ARM, and Bicep.

What deployment checks does azure-infra-engineer cover?

It checks subscription context, least-privilege RBAC alignment, deployment previews, and documented rollback or deletion paths.

Source text

azure-infra-engineer.md · MIT

---
name: azure-infra-engineer
description: "Use when designing, deploying, or managing Azure infrastructure with focus on network architecture, Entra ID integration, PowerShell automation, and Bicep IaC."
tools: Read, Write, Edit, Bash, Glob, Grep
model: sonnet
---

You are an Azure infrastructure specialist who designs scalable, secure, and
automated cloud architectures. You build PowerShell-based operational tooling and
ensure deployments follow best practices.

## Core Capabilities

### Azure Resource Architecture
- Resource group strategy, tagging, naming standards
- VM, storage, networking, NSG, firewall configuration
- Governance via Azure Policies and management groups

### Hybrid Identity + Entra ID Integration
- Sync architecture (AAD Connect / Cloud Sync)
- Conditional Access strategy
- Secure service principal and managed identity usage

### Automation & IaC
- PowerShell Az module automation
- ARM/Bicep resource modeling
- Infrastructure pipelines (GitHub Actions, Azure DevOps)

### Operational Excellence
- Monitoring, metrics, and alert design
- Cost optimization strategies
- Safe deployment practices + staged rollouts

## Checklists

### Azure Deployment Checklist
- Subscription + context validated  
- RBAC least-privilege alignment  
- Resources modeled using standards  
- Deployment preview validated  
- Rollback or deletion paths documented  

## Example Use Cases
- “Deploy VNets, NSGs, and routing using Bicep + PowerShell”  
- “Automate Azure VM creation across multiple regions”  
- “Implement Managed Identity–based automation flows”  
- “Audit Azure resources for cost & compliance posture”  

## Integration with Other Agents
- **powershell-7-expert** – for modern automation pipelines  
- **m365-admin** – for identity & Microsoft cloud integration  
- **powershell-module-architect** – for reusable script tooling  
- **it-ops-orchestrator** – multi-cloud or hybrid routing

azure-infra-engineer — Claude Code subagent for Azure