Senior Azure Platform Engineer

We're looking for a Senior Azure Platform Engineer to design and own the core Azure platform — landing zones, networking, API management, and Infrastructure as Code — that other engineering teams build on top of. You'll work within a platform engineering team responsible for secure, repeatable, and fully observable cloud foundations at enterprise scale.

Project
You'll build and evolve a multi-tenant Azure platform — landing zones, an API façade, and integration services — that underpins several client workloads, with security, observability, and DevOps automation designed in from day one.

Responsibilities
Design and evolve Azure Landing Zones on a strict hub-and-spoke topology (never peer-to-peer), including VNet peering, UDRs, layered network segmentation, NSGs, WAF, private endpoints, and egress control
Own Private DNS, Private Link, and hybrid DNS forwarding across the platform
Build and govern Azure API Management as an architectural façade: products, versioning, revisions, policy expressions, backend abstraction, subscription and OAuth 2.0 enforcement, developer portal governance, and self-hosted gateways for on-premises backends
Drive PaaS-first, Azure-default platform decisions across APIM, Logic Apps Standard, and Functions hosting, and explain the pattern behind every product choice
Design modular, composable Terraform modules (Azure Verified Modules) that let new platform capabilities be added without re-platforming
Build parameterised, multi-region and multi-instance Terraform blueprints, including configuration as code for APIM, Policy, monitoring, and DNS
Own module versioning, release management, and golden-path onboarding templates other engineering teams can consume
Implement automated platform testing, supply chain security for platform artefacts, and drift detection/reconciliation across instances
Define SLOs/SLIs, health models, alerting standards, runbooks, and synthetic testing; build dashboards on Azure Monitor, Log Analytics, and Application Insights
Harden the platform with Defender for Cloud, Entra ID managed identities, Key Vault, availability zones, and IaC-driven disaster recovery
Integrate diagnostic settings and data connectors as code with the shared Sentinel SIEM, and implement policy as code (Azure Policy definitions, initiatives, exemptions) with compliance reporting
Provide the private networking, identity, secrets, and observability foundation that async/event-driven workloads depend on, in partnership with the team owning messaging and event topology
Bring ad hoc scripts and unmanaged integrations under version-controlled, reviewed, and gated DevOps pipelines, eliminating manual or scheduled-task execution outside the platform

Requirements
5+ years of experience in cloud infrastructure/platform engineering, with deep hands-on Azure expertise
Strong knowledge of Azure Landing Zones, VNet peering, UDRs, and defence-in-depth networking (NSGs, WAF, private endpoints, egress control, Private DNS, Private Link, hybrid DNS forwarding)
Hands-on experience with Azure API Management as a façade layer: products, versioning, revisions, policy expressions, OAuth 2.0/subscription enforcement, developer portal governance, self-hosted gateways
Solid understanding of Azure Integration Services (APIM, Logic Apps Standard, Functions hosting) and the ability to justify pattern-driven product choices
Advanced Terraform skills: modular design, Azure Verified Modules, environment promotion, feature-flagged components
Experience building parameterised, multi-region/multi-instance IaC and golden-path onboarding templates for other teams
Practical experience with Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, and Sentinel SIEM integration
Experience with policy as code, Entra ID managed identities, Key Vault, availability zones, and IaC-driven disaster recovery
Strong analytical and communication skills, comfortable working cross-functionally with integration, security, and application teams
Upper-Intermediate English or higher

What We Offer
Transparent strategy and thoughtful management that keep everyone aligned
Space for personal growth and career development without limits
A culture of continuous learning: internal courses, workshops, and English classes twice a week
Skill up events where we share experience and stay on top of trends
Competitive perks: flexible schedule, a strong compensation package, support for professional certifications, and generous vacation policy
Team spirit that thrives through regular events, gatherings, and celebrations