DevOps Engineer
Reposted 2× across Djinni — deduped to one listing.
metahunt matched 2 postings of this exact role by semantic similarity, so you see it once instead of 2 times.
We're looking for a Senior Azure Platform Engineer to design and own the core Azure platform — landing zones, networking, API management, and Infrastructure as Code — that other engineering teams build on top of. You'll work within a platform engineering team responsible for secure, repeatable, and fully observable cloud foundations at enterprise scale.
Project
You'll build and evolve a multi-tenant Azure platform — landing zones, an API façade, and integration services — that underpins several client workloads, with security, observability, and DevOps automation designed in from day one.
Responsibilities
- Design and evolve Azure Landing Zones on a strict hub-and-spoke topology (never peer-to-peer), including VNet peering, UDRs, layered network segmentation, NSGs, WAF, private endpoints, and egress control
- Own Private DNS, Private Link, and hybrid DNS forwarding across the platform
- Build and govern Azure API Management as an architectural façade: products, versioning, revisions, policy expressions, backend abstraction, subscription and OAuth 2.0 enforcement, developer portal governance, and self-hosted gateways for on-premises backends
- Drive PaaS-first, Azure-default platform decisions across APIM, Logic Apps Standard, and Functions hosting, and explain the pattern behind every product choice
- Design modular, composable Terraform modules (Azure Verified Modules) that let new platform capabilities be added without re-platforming
- Build parameterised, multi-region and multi-instance Terraform blueprints, including configuration as code for APIM, Policy, monitoring, and DNS
- Own module versioning, release management, and golden-path onboarding templates other engineering teams can consume
- Implement automated platform testing, supply chain security for platform artefacts, and drift detection/reconciliation across instances
- Define SLOs/SLIs, health models, alerting standards, runbooks, and synthetic testing; build dashboards on Azure Monitor, Log Analytics, and Application Insights
- Harden the platform with Defender for Cloud, Entra ID managed identities, Key Vault, availability zones, and IaC-driven disaster recovery
- Integrate diagnostic settings and data connectors as code with the shared Sentinel SIEM, and implement policy as code (Azure Policy definitions, initiatives, exemptions) with compliance reporting
- Provide the private networking, identity, secrets, and observability foundation that async/event-driven workloads depend on, in partnership with the team owning messaging and event topology
Bring ad hoc scripts and unmanaged integrations under version-controlled, reviewed, and gated DevOps pipelines, eliminating manual or scheduled-task execution outside the platform
Requirements
- 5+ years of experience in cloud infrastructure/platform engineering, with deep hands-on Azure expertise
- Strong knowledge of Azure Landing Zones, VNet peering, UDRs, and defence-in-depth networking (NSGs, WAF, private endpoints, egress control, Private DNS, Private Link, hybrid DNS forwarding)
- Hands-on experience with Azure API Management as a façade layer: products, versioning, revisions, policy expressions, OAuth 2.0/subscription enforcement, developer portal governance, self-hosted gateways
- Solid understanding of Azure Integration Services (APIM, Logic Apps Standard, Functions hosting) and the ability to justify pattern-driven product choices
- Advanced Terraform skills: modular design, Azure Verified Modules, environment promotion, feature-flagged components
- Experience building parameterised, multi-region/multi-instance IaC and golden-path onboarding templates for other teams
- Practical experience with Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, and Sentinel SIEM integration
- Experience with policy as code, Entra ID managed identities, Key Vault, availability zones, and IaC-driven disaster recovery
- Strong analytical and communication skills, comfortable working cross-functionally with integration, security, and application teams
Upper-Intermediate English or higher
What We Offer
- Transparent strategy and thoughtful management that keep everyone aligned
- Space for personal growth and career development without limits
- A culture of continuous learning: internal courses, workshops, and English classes twice a week
- Skill up events where we share experience and stay on top of trends
- Competitive perks: flexible schedule, a strong compensation package, support for professional certifications, and generous vacation policy
- Team spirit that thrives through regular events, gatherings, and celebrations