Senior Cloud Platform Engineer (Azure) – Landing Zone

We are looking for a Senior Cloud Platform Engineer for our client – a leading international financial organization with a strong technology focus, whose digital solutions support millions of customers worldwide.

You’ll join a Cloud Platform team responsible for developing and operating enterprise cloud platforms. The role focuses on Azure Landing Zone, combining hands-on engineering, automation, networking, security and platform governance.

What you’ll be doing:

• Build and maintain Azure Landing Zone infrastructure as code using Terraform, with configuration management through Ansible and automation using Python and Bash.
• Develop central, reusable platform solutions that application teams can easily adopt.
• Design, build and maintain CI/CD pipelines for Landing Zone changes, including automated testing of platform components.
• Work in a genuine DevOps environment, actively participating in pull requests, code reviews and technical discussions.
• Contribute to architecture documentation and continuously identify opportunities to improve automation and eliminate manual work.
• Design and maintain the Azure networking foundation, including VNets, subnets, NSGs, route tables, hub-and-spoke architecture and network segmentation.
• Build and operate hybrid connectivity between Azure and on-premises data centers using ExpressRoute and VPN Gateway.
• Apply Zero Trust principles using Entra ID, Azure RBAC, Azure Policy and network segmentation.
• Establish cloud governance, security guardrails and best practices based on Azure Landing Zones and the Cloud Adoption Framework.
• Work with management groups, policy-as-code and governance standards to ensure a secure and compliant cloud environment.
• Build and improve observability, including dashboards and monitoring that provide visibility into the platform.
• Take part in P1/P2 incident response, lead root cause analysis and drive improvements to prevent recurring issues.

What we’re looking for:

• 5+ years of hands-on cloud engineering experience, with strong and current Azure expertise at enterprise scale.
• Practical experience designing and operating an Azure Landing Zone, ideally based on Cloud Adoption Framework / Enterprise-Scale principles.
• Strong knowledge of Terraform for Infrastructure as Code.
• Solid experience with Ansible for configuration and automation.
• Good programming and scripting skills in Python and Bash.
• Experience designing and maintaining CI/CD pipelines.
• Strong understanding of Azure networking, including:
  • VNet and hub-and-spoke architecture
  • Subnets, NSGs and route tables
  • ExpressRoute
  • VPN Gateway
  • Azure-to-on-premises connectivity
• Understanding of Zero Trust architecture and Azure security concepts such as Entra ID, RBAC and Azure Policy.
• Experience working with cloud governance, security and operational reliability in an enterprise environment.

Nice to have

• Degree in Computer Science, IT or a related field.
• Azure Solutions Architect Expert or Azure DevOps Engineer Expert certification.
• Experience with Docker and Kubernetes / AKS.
• Familiarity with security frameworks and compliance standards.
• Experience with monitoring and observability tools such as Azure Monitor, Prometheus, Grafana or ELK.
• ITIL or similar service management experience.
• Experience working in an Agile environment.

The offer:

• Hybrid working model and flexible approach to where you work.
• Attractive salary and benefits package.
• Private healthcare and life insurance.
• Multisport / sports benefits.
• Flexible working hours.
• Budget and opportunities for training and professional certifications.
• Strong career development opportunities and access to international projects.
• Work with modern Azure technologies at enterprise scale.
• Collaboration with experienced cloud and technology specialists.
• Modern, comfortable office designed for collaboration, focused work and employee wellbeing.
• Diverse and inclusive international environment.
• Strong focus on work-life balance, learning and continuous development.