Senior Cloud Center of Excellence Azure Platform Engineer

ppWe are looking for a senior engineer to help clean up the technical depth — from landing zone architecture to Terraform Enterprise module engineering, networking /ppdesign and enterprise system integrations. This is a medior/senior individual contributor role: you're expected to work independently on well-defined scopes, but you'll be ramping up within an existing team structure rather than owning the full platform strategy from day one. /ph3Day-to-Day Responsibilities /h3ulliAct as second-line escalation for Azure platform issues (RBAC, DNS, VNET/Private Endpoint connectivity, AD integration, Terraform Enterprise /liliruns) and write up root cause analyses. /liliMaintain and incrementally improve landing zones, archetypes, Azure Policy and naming/tagging standards; process governance exception requests. /liliBuild, version and maintain Terraform modules; review consumer changes and evaluate Azure Verified Modules (AVM) as replacements for custom /lilimodules. /liliHandle recurring IAM tickets (RBAC assignments, group memberships, access troubleshooting) and contribute to cleanup of legacy/exception-based /liliaccess. /liliSupport DNS/connectivity requests and troubleshooting across the hybrid environment within existing patterns. /liliMaintain and troubleshoot existing PowerShell automation scripts used across platform operations. /liliKeep governance documentation current and contribute to internal Terraform Enterprise workshops and application team enablement. /li /ulh3Required Technical Expertise /h3ulliGovernance: management groups, subscriptions, Azure Policy (built-in and custom), RBAC design and troubleshooting. /liliIdentity: Microsoft Entra ID — group-based access models, app registrations, managed identities, service principals. /liliintegration. /liliLanding zone concepts aligned with Microsoft Cloud Adoption Framework (CAF) archetypes. /liliExposure to Azure Databricks networking (VNet injection) is a plus. /li /ulpInfrastructure as Code /pulliSolid production-level Terraform authoring — designing, versioning and publishing modules, not just consuming them. /liliTerraform Enterprise or Terraform Cloud experience specifically: workspaces, private module registry, VCS-driven workflows, policy checks (Sentinel/OPA). /liliFamiliarity with Azure Verified Modules (AVM) and module lifecycle/versioning practices. /li /ulpDevOps Automation /pulliCI/CD pipeline experience (Azure DevOps preferred): build/release pipelines, YAML pipelines, service connections. /liliScripting for automation and troubleshooting (PowerShell, Bash or Python). /liliComfortable working with KQL/Log Analytics for diagnostics is a plus. /li /ulpIdentity Access Management /pulliPractical RBAC design and troubleshooting at enterprise scale (role assignments, group nesting, inheritance issues, propagation delays). /liliExperience managing access for both human users and service/application identities. /liliUnderstanding of access governance concepts (ownership, periodic reviews, exception handling). /li /ulpNetworking /pulliSolid understanding of enterprise DNS architecture, including hybrid on
- prem/cloud scenarios. /liliExperience troubleshooting connectivity issues across VNETs, firewalls, and hybrid links. /li /ulh3Prior Experience we're Looking For /h3ulli4–7 years in a cloud platform engineering, DevOps or infrastructure engineering role, ideally within a large, governed enterprise (not a /liligreenfield/startup environment). /liliDemonstrated experience operating (not just building) an Azure landing zone platform at scale — supporting real application teams with real tickets. /liliPrior role involving Terraform Enterprise/Cloud in a production capacity, ideally including module authorship and CI/CD integration. /liliExperience working across team boundaries (IAM, Networking, Security, external partners/vendors) to resolve platform issues. /liliMicrosoft certifications (AZ-104, AZ-204, AZ-305, or Terraform Associate) are a strong plus but not a substitute for demonstrable hands-on experience. /li /ulh3Personal Characteristics /h3ulliCan operate independently on a well-scoped task from day one — this is a "plug in and go"; role, not a ramp-up position. /liliComfortable working in a live, legacy-entangled environment where not everything is fully standardized yet. /liliDetail-oriented, especially around governance, documentation and naming/tagging consistency. /liliGood communicator — able to support application teams directly without needing everything translated by the platform lead. /liliTakes ownership of tickets/incidents end-to-end rather than escalating prematurely. /li /ulh3Important /h3pwe are looking for 2 resources for a temporary 6 month assignment. The place of work can be Belgium or Czech Republic. /p /p