You will be part of a Cloud Center of Excellence (CCoE) responsible for designing, managing, and scaling a large-scale Azure platform and its associated self-service capabilities within an organization. The environment is growing rapidly, with a focus on modernizing governance, identity, networking, and Infrastructure-as-Code to support the increasing number of applications, subscriptions, and cloud users.
You will work as a hands-on individual contributor and independently take ownership of clearly defined technical challenges, collaborating closely with platform, IAM, networking, security, and application teams.
What you will do.
- Act as 2nd-line escalation for Azure platform issues around RBAC, DNS, VNETs, Private Endpoints, Entra ID, and Terraform Enterprise
- Investigate incidents and perform root-cause analyses
- Maintain and improve Azure landing zones, archetypes, Azure Policy, and governance standards
- Design, version, and maintain Terraform modules and review infrastructure changes
- Evaluate and introduce Azure Verified Modules (AVM) where relevant
- Troubleshoot and improve enterprise-level IAM and RBAC processes
- Support DNS and hybrid connectivity issues between Azure and on-premises environments
- Maintain and improve existing PowerShell automation for platform operations
- Keep technical and governance documentation up-to-date
- Contribute to Terraform Enterprise workshops and support application teams
What they ask Your technical expertise:
- Azure – hands-on production experience required
- Azure Management Groups, Subscriptions, and Azure Policy
- RBAC design and troubleshooting
- Microsoft Entra ID Managed Identities, Service Principals, and App Registrations
- VNET peering / hub-and-spoke
- Private Endpoints and Private DNS Zones
- Azure Firewall, Application Gateway, and Front Door
- Hybrid/on-premises DNS integration
- Azure Landing Zones and Microsoft Cloud Adoption Framework (CAF)
- Experience with Azure Databricks networking is a plus
Infrastructure as Code:
- Strong production experience with Terraform
- Designing, versioning, and publishing Terraform modules
- Terraform Enterprise or Terraform Cloud Workspaces, private module registry, and VCS workflows
- Sentinel/OPA policy checks
- Azure Verified Modules (AVM)
DevOps & Automation:
- Experience with CI/CD, preferably Azure DevOps YAML pipelines, build/release pipelines, and service connections
- PowerShell, Bash, and/or Python
- KQL / Log Analytics is a plus
Identity & Networking:
- Enterprise-scale RBAC and access troubleshooting
- Human and application/service identities
- Access governance and exception management
- Enterprise DNS architecture
- Troubleshooting of VNET, firewall, and hybrid connectivity issues
Profile
- 4–7 years of experience in Cloud Platform Engineering, DevOps, or Infrastructure Engineering
- Experience managing Azure landing zones at enterprise scale, including supporting application teams and production environments
- Proven experience with Terraform Enterprise/Cloud, preferably including module development
- Experience collaborating between IAM, Networking, Security, and external partners
- You are comfortable in complex, existing environments where not everything is fully standardized yet
- You take ownership of technical problems, from analysis to solution
- You communicate fluently and can directly support application teams
- You are structured, pragmatic
- Microsoft certifications such as AZ-104, AZ-204, AZ-305, or Terraform Associate are a strong asset
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.