Azure Cloud Engineer, Data Mesh and AI Platforms team
Job ID: 6282
Welcome to Group Technology, where we engineer solutions that support Nordea's transformation and enable the Customer Vision and Business Strategy. As part of Nordea's 2030 strategic direction, we are modernizing our technology and data estate while accelerating the adoption of AI-enabled capabilities across the bank.
We are looking for experienced Azure Cloud Engineers to join our Data Mesh and AI Platforms team. You will help deliver secure, automated, and reusable Azure infrastructure and platform capabilities in close collaboration with engineers, architects, product owners, and governance stakeholders.
This is a hands-on engineering role. You will design, build, test, and improve Azure platform patterns, automation, and operational controls that enable internal teams to provision and operate modern data and AI solutions safely in a regulated banking environment.
About our team
Welcome to the Data Mesh and AI Platforms team. We are building the next generation of cloud-native data and AI platform capabilities for Nordea, with a strong focus on secure infrastructure, automated provisioning, identity integration, reusable engineering patterns, and strong operational controls. You will work closely with product owners, engineers, architects, cybersecurity, data governance, and cloud platform teams. The role requires strong practical engineering skills, a delivery mindset, and the ability to turn platform architecture and agreed standards into high-quality, reusable implementation. This is a full-time permanent position with a hybrid working arrangement—up to 40% remote work is possible, but full remote work is not allowed. We expect to hire in one of these cities: Gdańsk or Gdynia, Poland; Copenhagen, Denmark; or Helsinki, Finland.
Your main responsibilities will include, but are not limited to:
- Build, configure and improve Azure infrastructure foundations using Terraform and automated delivery pipelines.
- Implement reusable infrastructure-as-code modules for subscriptions, resource groups, networking, Azure RBAC, managed identities, secrets, logging, monitoring, and policy guardrails.
- Support secure Azure landing-zone patterns, including management-group and subscription structure, hub-and-spoke networking, virtual networks, private endpoints, Azure Firewall, network security groups, and environment isolation.
- Create and maintain CI/CD pipelines for provisioning, validation, testing, deployment, and lifecycle management of platform components.
- Implement identity and access patterns using Microsoft Entra ID, federation, managed identities, least-privilege Azure RBAC, privileged access controls, and secure access workflows.
- Build observability and operational controls using Azure Monitor, Log Analytics, Application Insights, alerting, dashboards, runbooks, and production-readiness checks.
- Translate platform priorities and agreed engineering standards into well-structured backlog items, engineering tasks, implementation plans, and technical documentation.
- Collaborate with cybersecurity, governance and architecture teams to ensure platform capabilities meet security, compliance, and operational expectations.
- Contribute to code reviews, pattern reviews, testing practices, and continuous improvement of the Azure platform engineering experience.
Key skills required for this role:
- Azure infrastructure: Hands-on experience with Azure subscriptions, resource groups, virtual networks, hub-and-spoke networking, private endpoints, Azure Firewall, network security groups, and environment separation.
- Terraform and IaC: Strong Terraform skills, including module usage, reusable patterns, state handling, variables, outputs, validation, and promotion across environments.
- Identity and security: Practical knowledge of Microsoft Entra ID, Azure RBAC, least privilege, managed identities, federation, Key Vault, key management, and secure access patterns.
- CI/CD and automation: Experience building or operating Azure DevOps or equivalent pipelines for infrastructure provisioning, validation, deployment, policy checks, and release management.
- Data and AI platform services: Working knowledge of services such as Azure AI Foundry, Azure Machine Learning, Microsoft Fabric, Azure Data Factory, Event Hubs, Azure Storage, Azure Functions, or AKS.
- Observability and operations: Experience with Azure Monitor, Log Analytics, Application Insights, alerting, dashboards, runbooks, incident response, and production-readiness practices.
- Engineering collaboration: Ability to work in a team, write clear documentation, participate in reviews and communicate technical decisions clearly.
Who you are
This is the right role for you if you:
- Are hands-on: You enjoy building infrastructure, automation, and platform capabilities that are robust, reusable, and easy for others to consume.
- Care about secure engineering: You understand that identity, access, network boundaries, auditability, and operational controls are core parts of platform delivery.
- Are delivery focused: You can take agreed priorities and engineering standards, break them into concrete tasks, and deliver working outcomes with quality and discipline.
- Are curious about AI platforms: You want to help make data and AI capabilities available in a controlled, scalable, and developer-friendly way.
- Collaborate well: You communicate clearly, ask good questions, and work constructively with engineers, architects, and governance stakeholders.
What we're looking for:
- Education and Experience:
- A BSc or MSc in Computer Science, Engineering, Information Security, Data Engineering, or a related discipline, or equivalent practical experience.
- Several years of experience in cloud engineering, infrastructure engineering, platform engineering, DevOps, or similar roles.
- Required Qualifications:
- Practical experience building or operating production-grade infrastructure on Azure.
- Strong Terraform and automation experience, with an understanding of reusable module design and infrastructure lifecycle management.
- Solid understanding of Azure networking, Microsoft Entra ID, Azure RBAC, security controls, secrets management, Azure Policy, and operational monitoring.
- Experience with CI/CD tools and modern software engineering practices such as code review, version control, testing, and documentation.
- Interest in Azure data and AI services, especially Azure AI Foundry, Azure Machine Learning, Microsoft Fabric, and related platform capabilities.
- Ability to work in a regulated enterprise environment where compliance, resilience, and auditability matter.
Only for candidates in Finland: A security clearance will be performed for the person selected for this position.
Only for candidates in Poland: Please include permit for processing personal data in CV as following:
In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.
The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf.
We reserve the right to reply only to selected applications.