Azure Platform Engineer: Landing Zones & Governance

Caspian One; Greater London; In loco; GBP 85.000 - 120.000; Tempo pieno

Vantaggi offerti da questo lavoro

Ownership & technical influence

Direct access to senior leadership

Exposure to cloud, data & AI projects

Descrizione del lavoro

Caspian One is seeking a hands-on DevOps Specialist with strong Azure experience to help shape and scale our Azure platform for engineering, data, and AI workloads. You’ll work with senior technology stakeholders to set cloud standards, governance, and secure, scalable architectures across landing zones, networking, and IAM.

The role requires expertise in Terraform/Bicep, Entra ID, RBAC and policy-driven governance, with a focus on cost optimization and security best practices.

Competenze

• Strong experience designing and operating Azure platforms in enterprise environments.
• Hands-on experience with Azure Landing Zones, governance and security controls.
• Experience building infrastructure using Terraform and/or Bicep.
• Good understanding of Azure networking, identity and access management.
• Experience with Entra ID, RBAC, Conditional Access and privileged access controls.
• Scripting and automation skills using Python, PowerShell and/or Bash.
• Experience implementing governance frameworks, policy controls and security best practices.
• Strong communication skills and the ability to work closely with technical and non-technical stakeholders.
• Experience delivering AWS to Azure migrations.
• Experience within financial services or other regulated environments.
• Knowledge of NIST, CIS or similar security frameworks.
• Exposure to AI governance and security controls.
• Microsoft cloud certifications.

Mansioni

• Design, build and support Azure landing zones, management groups and subscription structures.
• Develop and maintain infrastructure as code using Terraform and/or Bicep.
• Build reusable platform services, standards and deployment patterns.
• Manage Azure identity and access management, including Entra ID, RBAC and privileged access controls.
• Design and support secure cloud networking solutions, including hybrid connectivity and private networking.
• Implement governance controls, Azure Policy and compliance automation.
• Monitor and optimise cloud usage and costs.
• Support data and AI platforms, including Azure Databricks environments.
• Collaborate with internal teams and third-party providers to improve platform capability and operational standards.
• Produce documentation, standards and guidance to support wider engineering teams.

Conoscenze

Azure Platform Design

Entra ID

RBAC

Conditional Access

Azure Networking

Python

PowerShell

Security Governance

NIST/CIS Knowledge

Stakeholder Communications

AI Governance

Azure Migrations

Strumenti

Terraform

Bicep

Descrizione del lavoro

Caspian One is seeking a hands-on DevOps Specialist with strong Azure experience to help shape and scale our Azure platform for engineering, data, and AI workloads. You’ll work with senior technology stakeholders to set cloud standards, governance, and secure, scalable architectures across landing zones, networking, and IAM.

The role requires expertise in Terraform/Bicep, Entra ID, RBAC and policy-driven governance, with a focus on cost optimization and security best practices.