Azure Cloud Platform Engineer (Location: West)
Summary
Senior engineer building and operating a secure, self-service Azure cloud platform with Terraform/Bicep, CI/CD, DevSecOps, and AI enablement for enterprise teams.
About the Role
Our client is looking for a hands-on Senior Cloud Platform Engineer to build and operate a secure, scalable and self-service Digital Factory Platform on Microsoft Azure. The role focuses on cloud platform engineering, automation, DevSecOps, AI enablement, governance and developer self-service across enterprise environments.
Responsibilities
- Design, build and operate Azure platform capabilities across development, UAT and production environments.
- Develop infrastructure-as-code and automated provisioning using Terraform, Azure Bicep or equivalent.
- Build reusable golden paths, templates and self-service capabilities for application teams.
- Design and manage CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar tools.
- Embed security, compliance and governance through policy-as-code, automated controls and DevSecOps practices.
- Support the secure deployment and production hardening of AI-enabled applications, including containerisation, APIs, monitoring and access controls.
- Implement Entra ID, RBAC, PIM, Conditional Access and least-privilege access controls.
- Establish platform observability, cost management and FinOps capabilities through monitoring, dashboards, tagging and cost reporting.
Requirements
- 10 years of hands-on engineering experience, with strong experience designing and operating Microsoft Azure platforms in enterprise or regulated environments.
- Strong knowledge of Azure Landing Zones, Azure Policy, Container Apps, App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud and Cost Management.
- Experience with Government Commercial Cloud (GCC) or comparable government/regulated cloud environments.
- Strong hands-on experience with Terraform/Bicep, CI/CD, GitOps and DevSecOps.
- Strong knowledge of Microsoft Entra ID, RBAC, PIM, Conditional Access and enterprise identity management.
- Practical experience with AI-assisted development tools such as GitHub Copilot, Microsoft Copilot or Claude.
- Experience supporting or securing AI/ML workloads on Azure and taking AI applications towards production readiness.
- Working knowledge of Active Directory, SAML, OAuth 2.0, OpenID Connect and JWT.
- Experience with containers, APIs, cloud-native architectures, monitoring and production operations.
- Experience with Azure OpenAI, Microsoft Fabric, Synapse or AI governance will be good to have.