Azure Platform Engineer

Job description

Senior Azure Platform Engineer

3 month contract

£600 - £650 per day OUTSIDE IR35

Remote

Role Overview

We are looking for a Senior Azure Platform Engineer to design, build and operate a shared Azure integration platform within a complex hybrid enterprise environment.

You will own the platform engineering layer, including Azure Landing Zones, networking, API Management, shared PaaS services, Infrastructure as Code, CI/CD, security, observability and disaster recovery.

The platform must be secure, repeatable and automated, with the ability to deploy consistently across multiple environments, regions and platform instances.

Key Responsibilities

- Design and implement Azure Landing Zones and hub-and-spoke networking.

- Build secure connectivity using VNets, peering, UDRs, NSGs, Private Link, Private DNS, WAF and controlled egress.

- Deploy and operate Azure API Management, including policies, products, versioning, certificates and self-hosted gateways.

- Implement Application Gateway, Azure Front Door and shared PaaS services including Logic Apps, Functions, Key Vault and monitoring.

- Own the Terraform / Infrastructure as Code estate, including reusable modules, state management, versioning and drift detection.

- Build Azure DevOps pipelines with approvals, security gates and workload identity federation.

- Implement Everything as Code across infrastructure, policy, APIM configuration, monitoring and DNS.

- Establish platform observability using Azure Monitor, Log Analytics and Application Insights.

- Integrate platform telemetry with Microsoft Sentinel and implement Azure Policy and Defender for Cloud controls.

- Design and test high availability, disaster recovery, resilience and regional failover.

- Implement certificate, secrets and identity lifecycle management.

- Establish platform capacity, cost management and operational standards.

- Create reusable workload onboarding templates and golden paths.

- Develop automated testing across infrastructure, networking, security and platform configuration.

- Maintain operational runbooks, architecture documentation and platform standards

Essential Experience

- 5+ years' Azure infrastructure experience, ideally including 2+ years in platform engineering or landing zones.

- Expert Terraform experience on Azure, including reusable modules and multi-environment deployments.

- Strong Azure networking knowledge: hub-and-spoke, VPN/ExpressRoute, NVAs, UDRs, NSGs, WAF, Private Link and DNS.

- Strong Azure API Management experience, including self-hosted gateways.

- Experience with Application Gateway and Azure Front Door.

- Strong Azure DevOps and CI/CD experience.

- Experience with Azure Integration Services, including Logic Apps and Functions.

- Strong knowledge of Azure security, Entra ID, RBAC, managed identities, Key Vault and Azure Policy.

- Experience with Azure Monitor, Log Analytics, Application Insights and Microsoft Sentinel.

- Experience implementing high availability, disaster recovery and resilience testing.

- Understanding of software supply-chain security, automated testing and secure CI/CD.

- Strong Infrastructure as Code and Everything as Code mindset.

- Ability to work with architecture, network, security and integration teams and translate architectural decisions into production-ready platforms.

Desirable

- Experience with hybrid/on-premises enterprise environments.

- Experience working with enterprise network teams and NVAs.

- Logic Apps Standard and VNet-integrated hosting.

- Experience integrating with legacy systems or ERP platforms.

- Experience operating shared Azure platforms across multiple regions.

- Experience creating reusable platform modules and golden-path templates.

- Experience with cloud cost optimisation and capacity planning