Senior Cloud Platform Engineer – Digital Factory Platform
Summary
Build and scale a secure, governed Azure platform for AI experiments and digital products, automating infrastructure, CI/CD, and FinOps to accelerate production deployments.
About the Role
We are looking for a hands-on Senior Cloud Platform Engineer with practical AI literacy to help build and scale our Client’s Digital Factory Platform on Microsoft Azure.
The platform provides a self-service, governed, and automation-led foundation that enables product teams to move digital products and AI experiments from sandbox to production faster, securely, and with clear accountability.
The role will focus on reusable platform capabilities across Azure infrastructure, Infrastructure as Code, CI/CD, DevSecOps, identity and access, observability, FinOps, compliance automation, AI application hardening, and developer self-service.
Key Responsibilities
- Design, build, and operate Azure platform capabilities across sandbox, QA, UAT, and production environments.
- Develop reusable Infrastructure as Code (IaC) using Azure Bicep, Terraform, or equivalent tools.
- Build self-service golden paths for environment provisioning, application templates, deployments, access requests, and approved developer tooling.
- Design and maintain CI/CD pipelines using Azure DevOps, GitHub, ShipHATS, or equivalent platforms.
- Embed security and compliance controls through policy-as-code, automated security checks, quality gates, and platform guardrails.
- Harden AI-generated and experimental applications into production-ready MVPs through secure architecture, containerisation, API management, monitoring, and deployment standards.
- Implement identity and access controls using Microsoft Entra ID, RBAC, Privileged Identity Management (PIM), Conditional Access, and least-privilege practices.
- Develop observability capabilities using Azure Monitor, Log Analytics, dashboards, alerts, and platform health metrics.
- Support FinOps and TCO transparency through tagging, budget alerts, cost allocation, token-cost tracking, and showback reporting.
- Secure and operate Azure-based AI/ML platform services, including access controls, networking, monitoring, and production-readiness controls.
- Collaborate with developers, Product Owners, Security, Audit, Finance, and leadership stakeholders to ensure platform capabilities meet business and governance requirements.
- Develop reusable engineering patterns, templates, operating procedures, and platform documentation.
- Continuously improve platform capabilities based on adoption, operational metrics, and product-team feedback.
Required Skills & Experience
- 10+ years of hands-on engineering experience, with significant experience designing, building, managing, and operating Microsoft Azure infrastructure in enterprise or regulated environments.
- Strong hands-on experience with Azure Landing Zones, Azure Policy, Azure Container Apps, App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud, and Azure Cost Management.
- Hands-on experience operating within Government Commercial Cloud (GCC) environments, including government security, compliance, identity, networking, governance, and operational controls.
- Extensive experience with Azure Bicep, Terraform, or equivalent IaC and automated provisioning technologies.
- Extensive experience designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS, or similar platforms.
- Strong DevSecOps experience, including security scanning, secrets management, vulnerability management, policy-as-code, automated quality checks, compliance controls, deployment promotion, and rollback.
- Strong identity and access engineering experience with Microsoft Entra ID, RBAC, Conditional Access, PIM, access reviews, and least-privilege governance.
- Working knowledge of Active Directory and hybrid identity, including directory services, authentication flows, and group-based access.
- Understanding of authentication and authorisation standards, including SAML, OpenID Connect, OAuth 2.0, and JWT.
- Practical experience with containerisation, APIs, cloud-native architecture, and production-readiness practices.
- Experience supporting at least one production cloud-native application or shared platform capability, including deployment, reliability, monitoring, or operational support.
- Experience integrating, securing, and operating AI/ML services on Azure.
- Practical AI literacy and experience with AI-assisted development tools such as GitHub Copilot, Microsoft Copilot, Claude, or equivalent.
- Ability to translate platform architecture into reusable templates, engineering patterns, self-service workflows, and developer platform capabilities.
- Strong documentation, communication, and stakeholder management skills.
- Experience working in Agile and product-oriented engineering environments.
Preferred Skills
- Experience with Azure OpenAI, Microsoft Fabric, Synapse, AI application platforms, data products, or AI governance.
- Experience developing internal developer platforms, developer portals, platform APIs, self-service workflows, or golden-path templates.
- Experience in public-sector, government, or other regulated cloud environments.
- Knowledge of SRE, observability, Microsoft Sentinel, incident response automation, alert routing, and service-health dashboards.
- Understanding of FinOps, cloud cost optimisation, TCO modelling, showback, and cost accountability.
- Familiarity with Jira, Confluence, GitHub, Azure DevOps, ShipHATS, Copilot, and similar engineering productivity tools.
Ideal Candidate
The ideal candidate is a practical senior platform engineer who can turn cloud architecture into secure, reusable, automated platform capabilities.
You should be comfortable building Azure services, automating infrastructure and delivery pipelines, implementing security and compliance guardrails, and creating self-service capabilities that allow development teams to work faster with less operational friction.
You should also understand how to support AI-enabled applications in production and use AI-assisted engineering tools responsibly while maintaining security, reliability, governance, and accountability.
Why Join Us
This is an opportunity to help shape a strategic Digital Factory Platform that modernises how digital products and AI solutions are built and operated.
The role will directly contribute to improving developer productivity, cloud governance, security, automation, cost transparency, and the responsible adoption of AI across the organisation.