Platforms Engineer (#5845)

N-iX; España; Híbrido; EUR 65.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working format

Competitive salary

Mentorship program

Tech talks & trainings

Descripción de la vacante

N-iX is seeking an experienced Platforms/Infrastructure Engineer to shape and operate secure Azure and hybrid infrastructure across a global environment. You will design landing zones, implement guardrails and access controls, and lead automation using Terraform, Bicep, ARM templates, and PowerShell.

In this role, you will ensure platform security, perform patching and lifecycle management, and support incident response in a remote-friendly setting. A Microsoft Azure certification is required.

Formación

• 5+ years of IT experience or equivalent.
• Strong knowledge of Microsoft Azure and hybrid environments.
• Experience with ITIL-aligned operations is a plus.

Responsabilidades

• Design, build and optimise Azure infrastructure and hybrid environments.
• Maintain secure Azure landing zones and access controls.
• Manage Entra ID services including RBAC, PIM, and MFA.
• Patch, lifecycle management and hardening of Windows/Linux workloads.
• Develop infrastructure as code using Terraform and Bicep.
• Monitor health and performance with Azure Monitor and Grafana.

Conocimientos

Entra ID

RBAC

MFA

SSO

PIM

PowerShell

Terraform

Bicep

ARM templates

Azure Monitor

Security hardening

Educación

Microsoft Azure certification(s)

Herramientas

Terraform

Bicep

ARM templates

PowerShell

Azure DevOps

GitHub Enterprise

Descripción del empleo

European Union

Work type:

Office/Remote

Technical Level:

Middle

Job Category:

Software Development

Project:

We are looking for an experienced Platforms/Infrastructure Engineer to join a global technology environment and take responsibility for the design, operation, security, and continuous improvement of Microsoft Azure and hybrid infrastructure platforms. The role combines strong Microsoft Azure, Entra ID, Windows/Linux Server, Infrastructure as Code, automation, security, observability, and platform operations expertise. The engineer will help design and maintain secure Azure landing zones, support global infrastructure services and business-critical environments, and act as an escalation point for complex platform issues.

Key Responsibilities:

• Design, build, maintain, and optimise Microsoft Azure infrastructure and hybrid cloud environments.
• Design and maintain secure Azure landing zones, platform guardrails, policies, subscription structures, namingstandards, and access controls.
• Manage and improve Microsoft Entra ID services, including RBAC, PIM, Conditional Access, MFA, SSO, SCIM, administrative units, and identity governance.
• Build, harden, patch, maintain, and decommission Windows Server and Linux workloads across Azure, VMware/ESXi, Azure Local/HCI, colocation, and on-premises environments.
• Support patching and lifecycle management, including virtual patching approaches for legacy operating systems where standard patching is not possible.
• Design and deploy infrastructure using Infrastructure as Code, primarily Terraform and Bicep, as well as ARMtemplates.
• Develop and maintain infrastructure automation using PowerShell, Azure Automation Runbooks, JSON, andYAML.
• Support Azure Automation Runbooks across cloud and hybrid environments, including Hybrid Worker configurations.
• Monitor platform health, capacity, availability, and performance using Azure Monitor, Log Analytics, Azure Managed Grafana, and related observability solutions.
• Ensure platform security and compliance through security hardening, CIS baselines, vulnerability remediation, identity controls, and certificate lifecycle management.
• Manage patching, upgrades, and infrastructure lifecycle activities using Azure Update Manager and automation.
• Participate in incident and problem management, including troubleshooting, root cause analysis, and implementation of long-term solutions.
• Act as an escalation point and subject-matter expert for Azure, Entra ID, and server infrastructure.
• Support highly available and resilient platforms using SRE principles, including HA, load balancing, resilience engineering, and continuous improvement.
• Participate in an on-call rotation and occasional out-of-hours support for critical global services.

Must-Have Technical Skills:

• Conditional Access, MFA, PIM, RBAC, SSO, SCIM, and identity governance
• Windows Server 2016-2025
• Terraform and Bicep
• ARM templates
• PowerShell
• Azure Automation Runbooks and Hybrid Worker environments
• Azure governance, secure landing zones, and platform security
• Azure Monitor, Log Analytics, and Azure Managed Grafana
• Server and cloud security hardening
• Patch and lifecycle management, including legacy OS / virtual patching scenarios

Experience Requirements:

• 5+ years of professional IT experience.
• 3+ years of hands‑on cloud and infrastructure engineering experience, particularly with Microsoft Azure andhybrid environments.
• Proven experience supporting large and complex enterprise environments.
• Experience working across distributed/global teams.
• Experience with ITIL-aligned operations, including Incident, Problem, Change, Request Fulfilment, and ServiceTransition.
• Strong troubleshooting and root cause analysis capabilities.
• Ability to work independently in a remote environment and manage priorities with minimal supervision.
• Strong written and verbal English communication skills.
• Experience in financial services, insurance, or a similarly complex enterprise environment is preferred.
• Relevant Microsoft Azure certification(s) are required.

Nice to Have:

• Azure networking: VNets, NSGs, firewalls, private endpoints, and routing.
• VMware / ESXi and Azure Local / HCI.
• Azure DevOps and GitHub Enterprise.CI/CD pipelines for infrastructure deployment.
• Jira and Confluence.
• Experience with cloud cost optimisation, forecasting, and consumption management.

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing