> Markdown version of [/jobs/ext/2990076-senior-cloud-center-of-excellence-azure-platform-engineer](https://www.wearedevelopers.com/jobs/ext/2990076-senior-cloud-center-of-excellence-azure-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Center of Excellence Azure Platform Engineer - **Company:** Xquisit - **Location:** Antwerpen, Belgium - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Microsoft Azure, Bash Shell, Microsoft Online Services, Cloud Computing, Continuous Integration, DevOps, Domain Name System (DNS), Identity and Access Management, Python (Programming Language), Log Analysis, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Kusto Query Language, Management of Software Versions, YAML, Scripting, Cloud Platform System, Delivery Pipeline, Firewalls (Computer Science), Terraform, Databricks - **Published:** September 19, 2026 - **Apply:** https://www.adzuna.be/details/5889313560 ## About the Role We are looking for a senior engineer to help clean up the technical depth - from landing zone architecture to Terraform Enterprise module engineering, networking design and enterprise system integrations. This is a medior/senior individual contributor role: you're expected to work independently on well-defined scopes, but you'll be ramping up within an existing team structure rather than owning the full platform strategy from day one., Azure (hands-on production experience required) * Governance: management groups, subscriptions, Azure Policy (built-in and custom), RBAC design and troubleshooting. * Identity: Microsoft Entra ID - group-based access models, app registrations, managed identities, service principals. * Networking: VNET peering/hub-spoke, Private Endpoints, Private DNS Zones, Azure Firewall, Application Gateway, Azure Front Door, hybrid/on-prem DNS * integration. * Landing zone concepts aligned with Microsoft Cloud Adoption Framework (CAF) archetypes. * Exposure to Azure Databricks networking (VNet injection) is a plus. Infrastructure as Code * Solid production-level Terraform authoring - designing, versioning and publishing modules, not just consuming them. * Terraform Enterprise or Terraform Cloud experience specifically: workspaces, private module registry, VCS-driven workflows, policy checks (Sentinel/OPA). * Familiarity with Azure Verified Modules (AVM) and module lifecycle/versioning practices. DevOps & Automation * CI/CD pipeline experience (Azure DevOps preferred): build/release pipelines, YAML pipelines, service connections. * Scripting for automation and troubleshooting (PowerShell, Bash or Python). * Comfortable working with KQL/Log Analytics for diagnostics is a plus. Identity & Access Management * Practical RBAC design and troubleshooting at enterprise scale (role assignments, group nesting, inheritance issues, propagation delays). * Experience managing access for both human users and service/application identities. * Understanding of access governance concepts (ownership, periodic reviews, exception handling). Networking * Solid understanding of enterprise DNS architecture, including hybrid on- prem/cloud scenarios. * Experience troubleshooting connectivity issues across VNETs, firewalls, and hybrid links. Prior Experience we're Looking For * 4-7 years in a cloud platform engineering, DevOps or infrastructure engineering role, ideally within a large, governed enterprise (not a * greenfield/startup environment). * Demonstrated experience operating (not just building) an Azure landing zone platform at scale - supporting real application teams with real tickets. * Prior role involving Terraform Enterprise/Cloud in a production capacity, ideally including module authorship and CI/CD integration. * Experience working across team boundaries (IAM, Networking, Security, external partners/vendors) to resolve platform issues. * Microsoft certifications (AZ-104, AZ-204, AZ-305, or Terraform Associate) are a strong plus but not a substitute for demonstrable hands-on experience. Personal Characteristics * Can operate independently on a well-scoped task from day one - this is a "plug in and go"; role, not a ramp-up position. * Comfortable working in a live, legacy-entangled environment where not everything is fully standardized yet. * Detail-oriented, especially around governance, documentation and naming/tagging consistency. * Good communicator - able to support application teams directly without needing everything translated by the platform lead. * Takes ownership of tickets/incidents end-to-end rather than escalating prematurely. ## Description * Act as second-line escalation for Azure platform issues (RBAC, DNS, VNET/Private Endpoint connectivity, AD integration, Terraform Enterprise * runs) and write up root cause analyses. * Maintain and incrementally improve landing zones, archetypes, Azure Policy and naming/tagging standards; process governance exception requests. * Build, version and maintain Terraform modules; review consumer changes and evaluate Azure Verified Modules (AVM) as replacements for custom * modules. * Handle recurring IAM tickets (RBAC assignments, group memberships, access troubleshooting) and contribute to cleanup of legacy/exception-based * access. * Support DNS/connectivity requests and troubleshooting across the hybrid environment within existing patterns. * Maintain and troubleshoot existing PowerShell automation scripts used across platform operations. * Keep governance documentation current and contribute to internal Terraform Enterprise workshops and application team enablement. ## Related Videos - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Empowering Thousands of Developers: Our Journey to an Internal Developer Platform](https://www.wearedevelopers.com/videos/1519-empowering-thousands-of-developers-our-journey-to-an-internal-developer-platform) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) - [Building a Cloud Platform Where Everything is Just Another Kubernetes Resource](https://www.wearedevelopers.com/videos/100137-building-a-cloud-platform-where-everything-is-just-another-kubernetes-resource) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)