Azure Infrastructure and Platform Engineer
Role details
Job location
Tech stack
Job description
We are looking for an Azure Infrastructure and Platform Engineer to provide support for business-critical Azure-hosted solutions. The role focuses on operating and supporting Azure infrastructure, networking, platform services, integrations, monitoring, and security controls. The successful candidate will be comfortable troubleshooting cloud-native applications and working closely with development teams, while remaining primarily focused on platform operations, reliability, and service management., * Platform & Infrastructure Support: Own incidents through to resolution across the Azure platforms and infrastructure underpinning cloud-native applications, meeting agreed service levels and operational targets.
- PaaS & Integration: Operate, monitor, and troubleshoot Azure platform services including App Services, Functions, Logic Apps, storage, databases, Service Bus, Event Grid, and API Management (APIM).
- Monitoring & Observability: Maintain platform and application health using Azure Monitor, Application Insights, Log Analytics, and automated alerting, acting proactively to prevent service disruption.
- Incident & Problem Management: Diagnose issues across infrastructure, platform, application, and integration layers. Perform root cause analysis and implement corrective actions to prevent recurrence.
- DevOps & Release Management: Support CI/CD pipelines, infrastructure-as-code deployments, environment promotion, and controlled releases across development, test, and production environments.
- Security & Governance: Support Azure security, identity, governance, and compliance controls including RBAC, PIM, Conditional Access, Azure Policy, Key Vault, and Microsoft Defender for Cloud.
- Developer Collaboration: Troubleshoot application issues, analyse logs and telemetry, debug straightforward defects, and work closely with development teams to resolve platform and application concerns.
- Operational Improvement: Identify opportunities to improve reliability, performance, monitoring, automation, documentation, and operational processes.
- On-Call Availability: Participate in a paid on-call and out-of-hours support rota to maintain service availability outside core business hours.
Requirements
Experience working within enterprise Azure Landing Zone environments, including governance, connectivity, and security controls, would be advantageous.
Security Clearance: This role requires the successful candidate to hold, or be eligible to obtain, UK Government SC (Security Check) clearance.
We are looking for an Azure Infrastructure and Platform Engineer to provide L2/L3 support for business-critical Azure-hosted solutions. The role focuses on operating and supporting Azure infrastructure, networking, platform services, integrations, monitoring, and security controls. The successful candidate will be comfortable troubleshooting cloud-native applications and working closely with development teams, while remaining primarily focused on platform operations, reliability, and service management.
Experience working within enterprise Azure Landing Zone environments, including governance, connectivity, and security controls, would be advantageous.
Security Clearance: This role requires the successful candidate to hold, or be eligible to obtain, UK Government SC (Security Check) clearance., * Demonstrable experience running and supporting cloud-native Azure environments.
- Deep working knowledge of Azure Networking & Connectivity; Design, operate and troubleshoot hub-spoke networking, Azure Firewall, Application Gateway/WAF, Private Endpoints, DNS, VPN/ExpressRoute, routing, network security controls and hybrid connectivity across platform and workload landing zones
- Experience in Identity & Access Management (IAM); Manage RBAC, PIM, Conditional Access, Managed Identities and Service Principals, ensuring secure access, least-privilege governance and compliance
- Experience supporting Azure governance and security capabilities including Azure Policy, Management Groups, Key Vault, Microsoft Defender for Cloud, and subscription governance.
- Strong working knowledge of Azure PaaS services including App Services, Functions, Logic Apps, Storage Accounts, and Azure databases, including configuration, scaling, resilience, and performance optimisation.
- Experience with Azure Monitor, Application Insights, Log Analytics, alerting, dashboards, and KQL-based troubleshooting.
- Strong understanding of SQL Server and Azure SQL, with exposure to Cosmos DB, Entra ID, Single Sign-On (SSO), and core Azure IaaS, PaaS, and SaaS services.
- Experience operating within enterprise Azure Landing Zone environments, including governance, connectivity, and security controls.
- Exposure to Azure Kubernetes Service (AKS), Azure Container Apps, or containerised workloads would be advantageous.
Support, Operations & DevOps
- Experience providing application and platform support, including incident, problem, and service request management to agreed service levels. ITIL awareness is desirable.
- Experience supporting Git-based source control, Azure DevOps pipelines (CI/CD), infrastructure-as-code deployments, and controlled releases across development, test, and production environments.
- Experience with Infrastructure as Code using Bicep, ARM Templates, Terraform, or equivalent automation technologies.
Development Fluency
- Sufficient C# /.NET knowledge to debug, trace, and troubleshoot application issues, with awareness of REST APIs and modern front-end frameworks such as React, Angular, or Blazor is desirable.
- Comfortable working with development teams as a technical peer, contributing to issue resolution across both platform and application layers.
- Experience using modern developer productivity tools, including GitHub Copilot, is desirable.
Other Requirements
- Strong communication, stakeholder management, and problem-solving skills, with experience working in Agile delivery and/or managed service environments.
- Azure certifications desirable, particularly AZ-104 (Azure Administrator), AZ-400 (DevOps Engineer), AZ-700 (Azure Network Engineer)
- Active SC clearance, or willingness and eligibility to undergo SC vetting.
- Willingness to participate in a paid on-call and out-of-hours support rota.
- Ability to work directly with clients, technical leads, architects, and delivery teams within regulated and public sector environments.