Platform Engineer – Belgium

Platform Engineer — NIHDI IT Platform Team

About the Role

The Platform Engineer is a key member of the Platform Team, responsible for enabling development, deployment, and operation of applications across the organization. You will design, build, and maintain the shared foundations — pipelines, infrastructure, and tooling — that development teams rely on to ship software faster, more securely, and more reliably.

You will own and evolve a shared Azure DevOps pipeline template library consumed by all application teams, manage Azure Kubernetes Service (AKS) clusters (including confidential compute), and automate infrastructure provisioning using Infrastructure as Code.

Key Responsibilities

• Design, build, and maintain Azure Kubernetes Service (AKS) clusters — both private and public — including node pool configuration, networking, ingress, autoscaling, and confidential compute workloads.
• Manage and evolve the Azure cloud platform: subscriptions, resource groups, Key Vault, Azure Container Registry, Service Bus, Storage Accounts, and SQL databases.
• Operate and support OpenShift environments where applicable.
• Ensure platform security, reliability, and compliance with organizational standards (network policies, managed identities, TLS, RBAC).
• Develop and maintain shared, reusable CI/CD pipeline templates (YAML) in Azure DevOps, consumed by all application repositories across the organization.
• Build and optimize multi-stage deployment pipelines covering build, test, package, and deploy for .NET 8 applications, including container image builds (Docker/ACR), database deployments (DACPAC/sqlpackage), and Service Bus provisioning.
• Author and maintain PowerShell Core 7+ modules and scripts that drive pipeline logic — configuration generation, deployment map parsing, secret retrieval, Terraform variable construction, and Helm-based deployments.
• Ensure pipelines enforce security, quality gates (SonarQube), and environment promotion controls (DEV → TST → VAL → Manual Gate → PRD).
• Standardize deployment patterns so all project teams follow consistent, auditable release workflows.
• Design, author, and maintain Terraform modules for provisioning and configuring Azure resources: AKS workloads (via Helm provider), Keycloak identity clients, SQL users, managed identities, Key Vault HSM keys, and Service Bus RBAC.
• Automate provisioning, scaling, and lifecycle management of infrastructure resources using Terraform, Azure CLI, and PowerShell.
• Manage Terraform state (Azure Storage backend with AAD auth) and ensure safe, repeatable deployments across environments.
• Administer the shared Common/devops repository and associated deployment configuration repositories. Support version control practices, branching strategy (GitFlow: DEV/MAIN/hotfix), and PR validation workflows. Manage Azure DevOps service connections, agent pools, variable groups, and environment approvals.
• Serve as the bridge between infrastructure and application development teams, helping them integrate platform capabilities into their workflows.
• Provide guidance and support on platform standards, deployment map configuration, pipeline extension patterns, and troubleshooting.
• Write and maintain documentation (README, schema references, onboarding guides) for consuming teams.
• Review contributions to shared platform code for architectural consistency and backward compatibility.

Required Skills & Experience

• AKS: Hands‑on experience operating and configuring Azure Kubernetes Service — networking, ingress, node pools, autoscaling, confidential compute, Helm chart deployments.
• DevOps practices: Strong understanding of CI/CD principles, GitFlow branching, environment promotion, and deployment automation.
• .NET: Familiarity with .NET 10 build toolchain (dotnet build), NuGet, solution/