Azure Platform Engineer

· Lead Azure Platform Engineering & Landing Zone Design: Architect and build Azure cloud foundations from the ground up, including tenant design, management group hierarchy, subscription vending/factory, governance, and enterprise-scale landing zones aligned with Microsoft Cloud Adoption Framework (CAF).

· Infrastructure as Code & Terraform Expertise: Extend an existing HCP Terraform platform by designing and developing reusable Azure infrastructure modules, workspaces, and deployment patterns using Terraform, with strong emphasis on automation, standardization, and self-service consumption.

· Azure Governance & Security: Implement and manage Azure Policy, RBAC, Entra ID, managed identities, custom roles, least-privilege access controls, and enterprise security guardrails across multiple subscriptions and environments.

· Enterprise Networking: Design and support scalable Azure networking solutions including hub-and-spoke architectures, ExpressRoute, Azure Firewall, Private Endpoints, Private DNS, and Azure Virtual Network Manager.

· Platform Services Architecture: Build and operationalize cloud platforms supporting services such as AKS, Container Apps, App Services, Azure Functions, Azure SQL, PostgreSQL Flexible Server, Storage Accounts, Key Vault, and customer-managed encryption keys.

· Observability & Cloud Operations: Establish monitoring, logging, and operational excellence practices using Azure Monitor, Log Analytics, and cloud-native observability frameworks integrated into platform offerings by default.

· Platform Product Mindset: Design infrastructure products and reusable services that enable DevOps teams to provision and manage environments independently, with focus on API/interface design, module versioning, backward compatibility, CI/CD pipelines, and long-term maintainability.

· FinOps & Cost Governance: Define and implement enterprise-scale cost management practices including tagging standards, chargeback/showback models, subscription budgets, Azure Cost Management, reservations, savings plans, and cost visibility across hundreds of subscriptions.

· Experience with Azure Verified Modules (AVM), Defender for Cloud, HCP Terraform Enterprise, GitLab-based CI/CD, policy-as-code (Sentinel), and large-scale multi-subscription Azure environments.