Lead Azure Engineer

Intellias; España; On-site; EUR 90,000 - 140,000; Full time

Job summary

Intellias seeks an experienced Azure Lead Engineer to own the technical direction of Cloud Hub's enterprise Azure platform. This hands-on leadership role spans Landing Zones, governance, security, networking, automation, reliability and cost management.

The role collaborates with Engineering, Architecture, Security, Product and Operations to ensure a secure, scalable and governed Azure environment for approved use cases in line with enterprise standards.

Qualifications

• Five or more years in cloud infrastructure, platform engineering, DevOps or SRE, including at least three years of hands-on Azure experience.
• Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones.
• Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics and cost controls.
• Strong Azure networking experience: hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls and ExpressRoute/VPN.
• Production experience with IaC tools, Git-based delivery, CI/CD and scripting such as Python or PowerShell.
• Demonstrated technical leadership, mentoring, stakeholder influence and delivery in a global enterprise environment.

Responsibilities

• Own the Azure technical roadmap, reference architectures, standards and reusable implementation patterns.
• Lead architecture and design reviews; make pragmatic technical decisions and communicate trade-offs clearly.
• Mentor engineers, strengthen peer review and reduce dependency on individual subject-matter experts.
• Design, evolve and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services and workload guardrails.
• Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring and security-bydesign controls.
• Partner with Security, Architecture and Compliance teams to remediate risks and maintain audit-ready evidence.
• Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git and CI/CD pipelines.
• Build self-service subscription and platform capabilities with clear product interfaces, documentation and operational ownership.
• Control configuration drift, improve repeatability and minimise manual operational work.
• Establish observability, operational readiness, backup/recovery and incident-management standards.
• Lead complex troubleshooting, root-cause analysis and engineering improvements arising from incidents and problems.
• Optimise resilience, performance and cost through capacity management, FinOps practices and measurable service outcomes.
• Translate strategy into a prioritised backlog; identify dependencies, risks, owners and escalation paths.
• Coordinate delivery across squads and stakeholders while maintaining architecture, security and engineering quality.
• Represent Cloud Hub in Azure decisions and explain technical recommendations to both engineering and business audiences.

Skills

Azure Platform Engineering

Cloud Infrastructure Design

DevOps / SRE

Azure Policy

Azure Networking

IaC Tools

CI/CD Pipelines

Scripting: PowerShell

Technical Leadership

Tools

Terraform

ARM Templates

Git

CI/CD Tooling

Job description

The Azure Lead Engineer owns the technical direction and engineering quality of Cloud Hub's enterprise Azure platform. This is a hands-on leadership role spanning Azure Landing Zones, governance, security, networking, automation, reliability and cost management. The role works across Engineering, Architecture, Security, Product and Operations to provide a secure, scalable and governed Azure platform for approved and documented exception use cases in alignment with enterprise architecture standards.

Our client is a large global enterprise operating across multiple markets, with a complex technology landscape and a strong focus on digital transformation and innovation. The organization is actively investing in modern cloud, data, and AI capabilities to enable scalable, secure, and highly automated solutions across its business.

Requirements

• Five or more years in cloud infrastructure, platform engineering, DevOps or SRE, including at least three years of hands-on Azure experience.
• Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones.
• Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics and cost controls.
• Strong Azure networking experience: hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls and ExpressRoute/VPN.
• Production experience with IaC tools, Git-based delivery, CI/CD and scripting such as Python or PowerShell.
• Demonstrated technical leadership, mentoring, stakeholder influence and delivery in a global enterprise environment.

Preferred Qualifications

• Experience with multi-cloud environments, platform-product operating models, SRE practices and organisational change.

Responsibilities

• Own the Azure technical roadmap, reference architectures, standards and reusable implementation patterns.
• Lead architecture and design reviews; make pragmatic technical decisions and communicate trade-offs clearly.
• Mentor engineers, strengthen peer review and reduce dependency on individual subject-matter experts.
• Design, evolve and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services and workload guardrails.
• Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring and security-bydesign controls.
• Partner with Security, Architecture and Compliance teams to remediate risks and maintain audit-ready evidence.
• Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git and CI/CD pipelines.
• Build self-service subscription and platform capabilities with clear product interfaces, documentation and operational ownership.
• Control configuration drift, improve repeatability and minimise manual operational work.
• Establish observability, operational readiness, backup/recovery and incident-management standards.
• Lead complex troubleshooting, root-cause analysis and engineering improvements arising from incidents and problems.
• Optimise resilience, performance and cost through capacity management, FinOps practices and measurable service outcomes.
• Translate strategy into a prioritised backlog; identify dependencies, risks, owners and escalation paths.
• Coordinate delivery across squads and stakeholders while maintaining architecture, security and engineering quality.
• Represent Cloud Hub in Azure decisions and explain technical recommendations to both engineering and business audiences.