Medior/Senior Azure Platform Engineer – Cloud Center of Excellence

Are you an experienced Azure Platform Engineer who enjoys working at the intersection of cloud governance, infrastructure-as-code, networking and automation? Do you like solving complex platform issues while also helping build more scalable and standardized solutions?

Then this could be your next challenge. 🚀

🎯 Your mission

You’ll join a Cloud Center of Excellence responsible for designing, governing and scaling a large-scale Azure platform and its self-service capabilities.

The environment is growing rapidly, and the focus is now on modernizing governance, identity, networking and Infrastructure-as-Code to support increasing numbers of applications, subscriptions and cloud consumers.

You’ll work as a hands-on individual contributor: independently taking ownership of well-defined technical challenges while collaborating closely with platform, IAM, networking, security and application teams.

💻 What will you do?

• Act as 2nd-line escalation for Azure platform issues involving RBAC, DNS, VNETs, Private Endpoints, Entra ID and Terraform Enterprise.
• Investigate incidents and produce root-cause analyses.
• Maintain and improve Azure landing zones, archetypes, Azure Policy and governance standards.
• Design, version and maintain Terraform modules and review infrastructure changes.
• Evaluate and introduce Azure Verified Modules (AVM) where relevant.
• Troubleshoot and improve IAM and RBAC processes across the enterprise.
• Support DNS and hybrid connectivity across Azure and on-prem environments.
• Maintain and improve PowerShell automation used in platform operations.
• Keep technical and governance documentation up to date.
• Contribute to Terraform Enterprise workshops and enable application teams.

🛠️ Your technical expertise

Azure — hands-on production experience required

• Azure Management Groups, Subscriptions & Azure Policy
• RBAC design and troubleshooting
• Microsoft Entra ID
• Managed Identities, Service Principals & App Registrations
• VNET peering / hub-and-spoke
• Private Endpoints & Private DNS Zones
• Azure Firewall, Application Gateway & Front Door
• Hybrid/on-prem DNS integration
• Azure Landing Zones & Microsoft Cloud Adoption Framework (CAF)
• Azure Databricks networking is a plus

🏗️ Infrastructure as Code

• Strong Terraform production experience
• Designing, versioning and publishing Terraform modules
• Terraform Enterprise or Terraform Cloud
• Workspaces, private module registry and VCS workflows
• Sentinel/OPA policy checks
• Azure Verified Modules (AVM)

⚙️ DevOps & Automation

• CI/CD experience, preferably Azure DevOps
• YAML pipelines, build/release pipelines and service connections
• PowerShell, Bash and/or Python
• KQL / Log Analytics is a plus

🔐 Identity & Networking

• Enterprise-scale RBAC and access troubleshooting
• Human and application/service identities
• Access governance and exception management
• Enterprise DNS architecture
• Troubleshooting VNET, firewall and hybrid connectivity issues

👤 What are we looking for?

• 4–7 years of experience in Cloud Platform Engineering, DevOps or Infrastructure Engineering.
• Experience operating Azure landing zones at enterprise scale, supporting real application teams and production environments.
• Proven experience with Terraform Enterprise/Cloud, ideally including module development.
• Experience collaborating across IAM, Networking, Security and external partners.
• Comfortable working in complex, established environments where not everything is standardized yet.
• Able to take ownership of technical issues from investigation through resolution.
• Strong communication skills and comfortable supporting application teams directly.
• Structured, pragmatic and detail-oriented.
• Microsoft certifications such as AZ-104, AZ-204, AZ-305 or Terraform Associate are a strong plus.

🚀 Ready to take ownership of a large-scale Azure platform?

If Azure, Terraform, cloud governance and enterprise platform engineering are your playground, we'd love to hear from you