Azure Platform Engineer

Salary: £? - ? per year

Requirements:

• 5+ years of Azure infrastructure experience, ideally including 2+ years in platform engineering or landing zones.
• Expert Terraform experience on Azure, including reusable modules and multi-environment deployments.
• Strong Azure networking knowledge: hub-and-spoke, VPN/ExpressRoute, NVAs, UDRs, NSGs, WAF, Private Link and DNS.
• Strong Azure API Management experience, including self-hosted gateways.
• Experience with Application Gateway and Azure Front Door.
• Strong Azure DevOps and CI/CD experience.
• Experience with Azure Integration Services, including Logic Apps and Functions.
• Strong knowledge of Azure security, Entra ID, RBAC, managed identities, Key Vault and Azure Policy.
• Experience with Azure Monitor, Log Analytics, Application Insights and Microsoft Sentinel.
• Experience implementing high availability, disaster recovery and resilience testing.
• Understanding of software supply-chain security, automated testing and secure CI/CD.
• Strong Infrastructure as Code and Everything as Code mindset.
• Ability to work with architecture, network, security and integration teams and translate architectural decisions into production-ready platforms.
• Desirable: experience with hybrid/on-premises enterprise environments.
• Desirable: experience working with enterprise network teams and NVAs.
• Desirable: Logic Apps Standard and VNet-integrated hosting.
• Desirable: experience integrating with legacy systems or ERP platforms.
• Desirable: experience operating shared Azure platforms across multiple regions.
• Desirable: experience creating reusable platform modules and golden-path templates.
• Desirable: experience with cloud cost optimisation and capacity planning.

Responsibilities:

• Design and build a shared Azure integration platform within a complex hybrid enterprise environment.
• Own the platform engineering layer, including Azure Landing Zones, networking, API Management, shared PaaS services, Infrastructure as Code, CI/CD, security, observability and disaster recovery.
• Ensure the platform is secure, repeatable and automated, with consistent deployment across multiple environments, regions and platform instances.
• Design and implement Azure Landing Zones and hub-and-spoke networking.
• Build secure connectivity using VNets, peering, UDRs, NSGs, Private Link, Private DNS, WAF and controlled egress.
• Deploy and operate Azure API Management, including policies, products, versioning, certificates and self-hosted gateways.
• Implement Application Gateway, Azure Front Door and shared PaaS services including Logic Apps, Functions, Key Vault and monitoring.
• Own the Terraform / Infrastructure as Code estate, including reusable modules, state management, versioning and drift detection.
• Build Azure DevOps pipelines with approvals, security gates and workload identity federation.
• Implement Everything as Code across infrastructure, policy, APIM configuration, monitoring and DNS.
• Establish platform observability using Azure Monitor, Log Analytics and Application Insights.
• Integrate platform telemetry with Microsoft Sentinel and implement Azure Policy and Defender for Cloud controls.
• Design and test high availability, disaster recovery, resilience and regional failover.
• Implement certificate, secrets and identity lifecycle management.
• Establish platform capacity, cost management and operational standards.
• Create reusable workload onboarding templates and golden paths.
• Develop automated testing across infrastructure, networking, security and platform configuration.
• Maintain operational runbooks, architecture documentation and platform standards.

Technologies:

• API
• Azure
• CI/CD
• Cloud
• DevOps
• ERP
• Network
• PaaS
• RBAC
• Security
• Terraform
• VPN
• WAF
• ASP.NET

More:

We are hiring a Senior Azure Platform Engineer for a 3 month contract, offered at £600 - £650 per day outside IR35, working remotely. We are looking for someone to design, build and operate a shared Azure integration platform within a complex hybrid enterprise environment, with responsibility for secure, repeatable and automated platform delivery across multiple environments, regions and platform instances.

last updated 38 week of 2026