Cloud Platform Engineer - Azure

We are seeking a Cloud Platform Engineer to build and operate the core public cloud platform foundations that underpin all application workloads. This role will focus on implementing landing zones, identity integration, networking, and Infrastructure as Code (IaC) frameworks, working closely with senior platform engineers and platform services teams. The role sits within the Cloud Platform Engineering team and reports to the Cloud Platform & Services Operations Manager. It is a hands-on engineering role with strong automation and DevOps practices at its core. Key Responsibilities Cloud Platform Foundations - Implement and maintain cloud landing zones, account/subscription structures, and baseline configurations. - Provision and manage shared platform services (network hubs, identity integrations, management groups, etc.). Identity & Access - Implement cloud IAM policies, role-based access control, and federated identity integration. - Automate identity provisioning and access workflows where possible. Cloud Networking - Build and maintain cloud networking components (VNets/VPCs, routing, DNS, gateways, private endpoints). - Support connectivity patterns such as hub-and-spoke and private connectivity to on-premises. Infrastructure as Code (IaC) - Develop and maintain Terraform templates and modules. - Support CI/CD pipelines for platform provisioning and automation. - Ensure environments are built consistently using code-driven approaches. Platform Automation & Tooling - Contribute to automation tooling, scripts, and internal platform tooling. - Support self-service capabilities for application and product teams. Operational Support (BAU) - Support day-to-day platform operations and incident response. - Apply patches, upgrades, and maintenance to platform components. - Assist with onboarding new cloud environments and subscriptions/accounts. Documentation & Collaboration - Maintain engineering documentation, runbooks, and platform patterns. - Collaborate with Security, FinOps, and Platform Services teams to embed operational and governance controls. BAU vs Project Responsibilities BAU - Maintain landing zones, IAM integrations, networking, and IaC pipelines. - Respond to platform incidents and support requests. - Perform routine maintenance, upgrades, and configuration management. Project / Change - Implement new platform capabilities and architectural enhancements. - Improve automation, self-service, and developer experience. - Refactor platform components to improve security, scalability, and reliability. - Intermediate or advanced cloud certifications in AWS, Azure, or OCI (above Fundamentals level). - Eligible for UK Security Clearance Required Skills & Experience Technical - Experience with Azure - Experience with Infrastructure as Code tools (Terraform). - Understanding of cloud networking and identity fundamentals. - Familiarity with CI/CD pipelines and automation tools. Engineering Practices - Experience working in DevOps, SRE, or platform engineering environments. - Working within ITIL frameworks. - Ability to automate repetitive tasks using scripting (Bash, Python, PowerShell). - Understanding of cloud governance basics (tagging, policies, cost controls). Soft Skills - Collaborative and team-oriented approach. - Ability to follow architectural standards and engineering guidance. - Clear communication with engineering and operations teams. Desirable Experience - Experience designing or supporting enterprise network environments, including routing, firewalls, DNS, and private connectivity (VPN/ExpressRoute/Direct Connect). - Experience administering and supporting Windows Server environments, including Active Directory integration, patching, and hardening. - Experience administering and supporting Unix/Linux systems (RHEL, Ubuntu, SUSE), including configuration management and security hardening. - Exposure to container platforms and Kubernetes (AKS/EKS/GKE/OKE or on-prem Kubernetes). - Experience integrating monitoring and observability tooling (Azure Monitor, CloudWatch, Prometheus, Grafana, Manage Engine, SolarWinds.).