About the Role :

We are looking for a hands-on Azure Platform Engineer with 5+ years of Azure infrastructure/platform engineering experience. The ideal candidate will have strong Bicep/IaC, Azure networking, Microsoft Entra ID, managed identity, Azure DevOps, containers, Key Vault and production operations experience.

The candidate should have personally built and operated Azure environments and be comfortable owning infrastructure, deployment, security, environments, monitoring and troubleshooting end to end.

Role & Responsibilities :

- Own Azure infrastructure using Infrastructure as Code, with Bicep as the primary tool.

- Manage Azure Container Apps or AKS, Azure Database for PostgreSQL Flexible Server, Key Vault, Azure Front Door, WAF, VNets, Private Endpoints, Private DNS and Managed Identity.

- Own the end-to-end deployment path using Azure Developer CLI (azd) and Bicep, from environment configuration through application settings.

- Build and maintain Azure DevOps YAML pipelines and deployment automation; GitHub Actions experience is also relevant.

- Build and manage development, test, demonstration and sandbox environments.

- Manage Microsoft Entra ID app registrations, service principals, managed identities, permissions, admin consent, certificates and credential rotation.

- Maintain secure platform architecture covering network isolation, least privilege, secrets management and tenant isolation.

- Manage Application Insights, Log Analytics, alerting and platform health monitoring.

- Own infrastructure sizing, capacity and cost.

- Verify the actual deployed Azure state rather than relying only on successful pipeline execution.

- Build and maintain Docker/Linux container images, including images with native dependencies.

- Use Azure CLI, Azure Developer CLI, PowerShell or Bash for platform automation and troubleshooting.

- Work alongside application engineers and use enough TypeScript/Node.js to read the application, debug configuration issues and make small fixes.

- Create and maintain operational runbooks so the platform can be operated without depending on one individual.

Tech Stack & Requirements:

- 5+ years of hands-on experience in Azure infrastructure and platform engineering.

- Strong practical experience with Bicep and Infrastructure as Code. Strong Terraform or ARM experience can also be considered if the candidate is ready to work in Bicep from day one.

- Hands-on experience with Azure Container Apps or AKS.

- Strong Azure networking experience including VNets, Private Endpoints and Private DNS.

- Strong Microsoft Entra ID experience including app registrations, service principals, managed identities, permissions and consent.

- Experience with Azure DevOps YAML pipelines or GitHub Actions.

- Strong Docker and Linux container experience.

- Hands-on experience with Azure Key Vault, Front Door and WAF.

- Good working knowledge of Azure CLI, Azure Developer CLI, PowerShell or Bash.

- Ability to troubleshoot deployments by validating the actual running Azure state.

- Working knowledge of TypeScript/Node.js sufficient to understand application configuration and troubleshoot issues.

- Strong ownership mindset with experience building, operating and troubleshooting Azure platforms.

Desirable Experience:

- AZ-305, AZ-400 or AZ-104 certification.

- Power Platform, Dataverse or Dynamics 365 Finance & Operations environments.

- Microsoft Graph app-only access or SharePoint administration.

- Microsoft Fabric or Power BI workspace administration.

- FinOps / Azure cost management.

- Security questionnaires, penetration-test remediation, Essential Eight or ISO 27001.

- Consultancy or software-product environments supporting multiple customers where tenant isolation is important.