Cloud Platform Engineer
Posted
Summary
Cloud Platform Engineer supporting the design, build, and operations of an organization's Azure and Microsoft 365 platforms from Auckland (3 days onsite). Day-to-day spans Azure ops and IaC, Entra ID identity/Conditional Access, Zscaler Zero Trust access, Windows Server escalation support, and Datadog monitoring.
- Tech stack: Azure, Office 365 & identity, Zscaler
- Auckland central role - 3days onsite
- Competitive Salary + bonuses
As a Cloud Platform Engineer, you will support the design, build, and operational health of the organization’s cloud and modern workplace platforms. Working within the broader infrastructure team, you will bring hands-on expertise across Azure, Microsoft 365, and Zero Trust network access—playing a pivotal role in driving the transition toward a cloud-first, security-by-design operating model.
Key Responsibilities
- Cloud Platform: Contribute to Azure operations across production and non-production environments (compute, storage, networking, automation), support CI/CD pipelines, define IaC standards, and assist with cloud cost governance and on-premises migrations.
- Microsoft 365 & Identity: Operate and optimize Exchange Online, Intune, Teams, Purview, and Entra ID. Contribute to Conditional Access policies, BYOD enforcement, Entra ID Governance (access reviews, PIM), and M365 feature adoption.
- Zero Trust & Secure Access: Administer Zscaler ZIA and ZPA environments as legacy VPN is deprecated, contribute to architecture decisions, and support security controls aligned with NIST CSF 2.0.
- Infrastructure & Operations: Provide senior escalation support for Windows Server, Active Directory, and Entra ID incidents. Assist service management with incident/problem resolution and expand Datadog monitoring coverage.
- Documentation & Standards: Maintain accurate architecture diagrams, runbooks, and CMDB records to support asset management, compliance, and audit requirements.
- 5+ years in infrastructure or platform engineering, including at least 3 years in dedicated Azure and Microsoft 365 environments.
- Hands-on capability with Azure IaaS/PaaS, M365 suite (Intune, Conditional Access, Purview), Zscaler (ZIA/ZPA) or equivalent ZTNA platforms, and PowerShell/IaC scripting.
- Security-aware engineer who treats least-privilege as a discipline, possesses strong troubleshooting ownership, and values clear technical documentation.
- Strong communicator able to translate complex technical concepts for non-technical stakeholders and collaborate across multi-disciplinary teams.
- Microsoft certifications (AZ-104/AZ-305 or M365 Enterprise Administrator Expert)
- Financial/regulated industry experience are highly regarded