Azure Platform Engineer

• This is a hands-on senior engineering role for a deep Azure specialist: you will be the engineer who owns the Azure platform underneath our web estate and sets the technical standard for how it is run. You’ll keep our VM images current and compliant through the established build and release process, implement and respond to new policies as they are pushed across the estate, and drive infrastructure as code and PowerShell automation as the default way we work. You’ll design and make the changes yourself, and you’ll be expected to bring strong, well-founded opinions on how the platform should evolve.
• You’ll work day to day with platform engineers, application pods, and cybersecurity, act as the technical authority for Azure across the team, and raise the capability of engineers around you through review, guidance, and example., * - Operate and maintain the VM image build and release process: keep golden images current, apply hardening and patching updates, incorporate newly mandated controls, and manage testing and rollout of new image versions across the estate.
• • Implement and respond to Azure Policy and new governance controls as they are pushed: design compliant infrastructure, assess impact, and remediate drift and non-compliance.
• • Build and maintain infrastructure as code and the CI/CD pipelines that deploy it, moving manual changes into repeatable, reviewed automation.
• • Develop serious PowerShell automation: reusable modules and tooling for provisioning, configuration, and operational tasks, not one-off scripts.
• • Configure and troubleshoot core Azure networking: VNets, NSGs, private endpoints, DNS, load balancing, and traffic routing.
• • Lead technical investigation of complex platform issues across infrastructure, network, and application layers using logs, monitoring, and diagnostic tooling.
• • Produce clear technical documentation and explain platform behaviour to engineers and business stakeholders.

• • Deep, current hands-on experience engineering Azure platforms in production at scale: compute, storage, networking, identity, and governance. You understand how the platform actually works: ARM, the resource life cycle, RBAC, managed identities, and the Azure Policy engine, not just how to deploy resources.
• • Expert-level PowerShell: you have designed and built substantial automation in production, including reusable modules, error handling, testing, and tooling other engineers depend on. You are the person others come to when their automation breaks.
• • Strong command of Azure networking: VNets, NSGs, private endpoints, DNS, routing, load balancing, and hybrid connectivity, and the ability to design and troubleshoot traffic flows end to end.
• • Hands-on experience working with VM image build and release processes (eg, Azure Image Builder, Packer, or shared image galleries): updating, patching, and rolling out images through an established pipeline, with a solid grasp of image life cycle and versioning.
• • Infrastructure as code in production with any major tool (Bicep, Terraform, or ARM), including module design, state and pipeline management, and reviewing others’ code, not just writing your own.
• • Experience implementing and responding to governance at scale: interpreting new policies and controls as they land, assessing impact across an estate, and driving compliant remediation quickly.
• • A track record of leading the diagnosis of hard production issues across infrastructure, network, and application layers, and of being the engineer others escalate to.
• • Ability to produce clear technical documentation, explain platform behaviour to engineers and business stakeholders, and mentor less experienced engineers.

Desirable

• • Azure landing zone or enterprise-scale architecture experience (management groups, subscription design, hub-and-spoke).
• • Azure Policy authoring and remediation at scale.
• • Azure DevOps or GitHub Actions pipeline experience.
• • Entra ID, RBAC, and managed identity experience.
• • Experience operating within security and operational risk controls in regulated environments.
• • Relevant certifications (eg, AZ-104, AZ-305, AZ-400).

At Client, our Comms Tech (CT) platform team is at the heart of an ecosystem of services and applications that fuel our Enterprise Technology and shape Client’s bold global digital presence. We manage an extensive and dynamic portfolio, spanning over 180 Client Public Websites and the Client Intranet Workplace, delivering sleek, world-class digital experiences that resonate and connect Client colleagues and customers worldwide.