Senior Cloud Center of Excellence Azure Platform Engineer

Xquisit; Antwerpen; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Xquisit is seeking a senior engineer to tidy cloud governance and Azure landing zones, Terraform modules, and enterprise integrations. This independent contributor role ramps within an existing team, not a full-platform owner from day one.

You will handle escalations for the Azure platform, build and maintain Terraform assets, and contribute to governance and CI/CD practices in a mixed on-premise and cloud environment.

Qualifications

• Azure governance and RBAC design across landing zones.
• Experience with cloud platform governance, AD integration and IAM.
• Proficiency with Terraform Enterprise/Cloud, including modules and CI/CD.
• Hybrid networking knowledge and DNS/connectivity troubleshooting.
• Strong communication and documentation skills.

Responsabilités

• Act as second-line escalation for Azure platform issues (RBAC, DNS, VNET/Private Endpoint connectivity, AD integration) and write root cause analyses.
• Maintain and incrementally improve landing zones, archetypes, Azure Policy and naming/tagging standards; process governance exception requests.
• Build, version and maintain Terraform modules; review consumer changes and evaluate AVM replacements for custom modules.
• Handle recurring IAM tickets and cleanup legacy/exception-based access.
• Support DNS/connectivity requests and troubleshooting across the hybrid environment within existing patterns.
• Maintain and troubleshoot existing PowerShell automation scripts used across platform operations.
• Keep governance documentation current and contribute to internal Terraform Enterprise workshops and application team enablement.

Connaissances

RBAC design

Azure governance

Terraform

CI/CD pipelines

Networking

Outils

Terraform Enterprise

Terraform Cloud

Azure DevOps

PowerShell

Bash

Python

Description du poste

We are looking for a senior engineer to help clean up the technical depth — from landing zone architecture to Terraform Enterprise module engineering, networking

design and enterprise system integrations. This is a medior/senior individual contributor role: you're expected to work independently on well-defined scopes, but you'll be ramping up within an existing team structure rather than owning the full platform strategy from day one.

Day-to-Day Responsibilities

• Act as second-line escalation for Azure platform issues (RBAC, DNS, VNET/Private Endpoint connectivity, AD integration, Terraform Enterprise
• runs) and write up root cause analyses.
• Maintain and incrementally improve landing zones, archetypes, Azure Policy and naming/tagging standards; process governance exception requests.
• Build, version and maintain Terraform modules; review consumer changes and evaluate Azure Verified Modules (AVM) as replacements for custom
• modules.
• Handle recurring IAM tickets (RBAC assignments, group memberships, access troubleshooting) and contribute to cleanup of legacy/exception-based
• access.
• Support DNS/connectivity requests and troubleshooting across the hybrid environment within existing patterns.
• Maintain and troubleshoot existing PowerShell automation scripts used across platform operations.
• Keep governance documentation current and contribute to internal Terraform Enterprise workshops and application team enablement.

Required Technical Expertise

• Governance: management groups, subscriptions, Azure Policy (built-in and custom), RBAC design and troubleshooting.
• Identity: Microsoft Entra ID — group-based access models, app registrations, managed identities, service principals.
• integration.
• Landing zone concepts aligned with Microsoft Cloud Adoption Framework (CAF) archetypes.
• Exposure to Azure Databricks networking (VNet injection) is a plus.

Infrastructure as Code

• Solid production-level Terraform authoring — designing, versioning and publishing modules, not just consuming them.
• Terraform Enterprise or Terraform Cloud experience specifically: workspaces, private module registry, VCS-driven workflows, policy checks (Sentinel/OPA).
• Familiarity with Azure Verified Modules (AVM) and module lifecycle/versioning practices.

DevOps & Automation

• CI/CD pipeline experience (Azure DevOps preferred): build/release pipelines, YAML pipelines, service connections.
• Scripting for automation and troubleshooting (PowerShell, Bash or Python).
• Comfortable working with KQL/Log Analytics for diagnostics is a plus.

Identity & Access Management

• Practical RBAC design and troubleshooting at enterprise scale (role assignments, group nesting, inheritance issues, propagation delays).
• Experience managing access for both human users and service/application identities.
• Understanding of access governance concepts (ownership, periodic reviews, exception handling).

Networking

• Solid understanding of enterprise DNS architecture, including hybrid on- prem/cloud scenarios.
• Experience troubleshooting connectivity issues across VNETs, firewalls, and hybrid links.

Prior Experience we're Looking For

• 4–7 years in a cloud platform engineering, DevOps or infrastructure engineering role, ideally within a large, governed enterprise (not a
• greenfield/startup environment).
• Demonstrated experience operating (not just building) an Azure landing zone platform at scale — supporting real application teams with real tickets.
• Prior role involving Terraform Enterprise/Cloud in a production capacity, ideally including module authorship and CI/CD integration.
• Experience working across team boundaries (IAM, Networking, Security, external partners/vendors) to resolve platform issues.
• Microsoft certifications (AZ-104, AZ-204, AZ-305, or Terraform Associate) are a strong plus but not a substitute for demonstrable hands-on experience.

Personal Characteristics

• Can operate independently on a well-scoped task from day one — this is a "plug in and go"; role, not a ramp-up position.
• Comfortable working in a live, legacy-entangled environment where not everything is fully standardized yet.
• Detail-oriented, especially around governance, documentation and naming/tagging consistency.
• Good communicator — able to support application teams directly without needing everything translated by the platform lead.
• Takes ownership of tickets/incidents end-to-end rather than escalating prematurely.

Important

we are looking for 2 resources for a temporary 6 month assignment. The place of work can be Belgium or Czech Republic.