Platform Engineer

Caspian One; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Caspi an One is seeking a Senior Platform Engineer with strong Azure experience to design, build, and operate our Azure platform in an enterprise setting. You will implement landing zones, IaC with Terraform or Bicep, and help establish governance, security controls, and cost optimization across engineering, data and AI workloads.

You will collaborate with senior technology stakeholders and internal teams to raise platform standards and deliver scalable, compliant cloud solutions.

Qualifications

• Experience designing and operating Azure platforms in enterprise environments.
• Hands-on experience with Azure Landing Zones, governance and security controls.
• Experience building infrastructure using Terraform and/or Bicep.
• Knowledge of Azure networking, identity and access management.
• Experience with Entra ID, RBAC, Conditional Access and privileged access controls.
• Scripting in Python, PowerShell and/or Bash for automation.
• Experience implementing governance frameworks and security best practices.
• Strong communication with technical and non-technical stakeholders.
• Experience delivering AWS to Azure migrations.
• Experience in financial services or other regulated environments.
• Knowledge of NIST, CIS or similar security frameworks.
• Exposure to AI governance and security controls.
• Microsoft cloud certifications.

Responsibilities

• Design, build and support Azure landing zones, management groups and subscription structures.
• Develop and maintain infrastructure as code using Terraform and/or Bicep.
• Build reusable platform services, standards and deployment patterns.
• Manage Azure identity and access management, including Entra ID, RBAC and privileged access controls.
• Design and support secure cloud networking solutions, including hybrid connectivity and private networking.
• Implement governance controls, Azure Policy and compliance automation.
• Monitor and optimise cloud usage and costs.
• Support data and AI platforms, including Azure Databricks environments.
• Collaborate with internal teams and third-party providers to improve platform capability and operational standards.
• Produce documentation, standards and guidance to support wider engineering teams.

Skills

Azure platform design

Infrastructure as code

Governance and security

Networking

Scripting (Python/PowerShell/Bash)

Azure Databricks (data/AI workloads)

Azure identity & access management

AWS to Azure migrations

Tools

Terraform

Bicep

Azure

Job description

We're working with an investment management firm that is growing its internal cloud engineering capability and is looking to hire a Senior Platform Engineer with strong Azure experience.

This is a hands-on position where you'll play a key role in building and developing the firm's Azure platform. Working closely with senior technology stakeholders, you'll help establish cloud standards, improve governance, and provide a secure, scalable platform for engineering, data and AI workloads.

Responsibilities;

• Design, build and support Azure landing zones, management groups and subscription structures.
• Develop and maintain infrastructure as code using Terraform and/or Bicep.
• Build reusable platform services, standards and deployment patterns.
• Manage Azure identity and access management, including Entra ID, RBAC and privileged access controls.
• Design and support secure cloud networking solutions, including hybrid connectivity and private networking.
• Implement governance controls, Azure Policy and compliance automation.
• Monitor and optimise cloud usage and costs.
• Support data and AI platforms, including Azure Databricks environments.
• Collaborate with internal teams and third-party providers to improve platform capability and operational standards.
• Produce documentation, standards and guidance to support wider engineering teams.

Requirements;

• Strong experience designing and operating Azure platforms in enterprise environments.
• Hands-on experience with Azure Landing Zones, governance and security controls.
• Experience building infrastructure using Terraform and/or Bicep.
• Good understanding of Azure networking, identity and access management.
• Experience with Entra ID, RBAC, Conditional Access and privileged access controls.
• Scripting and automation skills using Python, PowerShell and/or Bash.
• Experience implementing governance frameworks, policy controls and security best practices.
• Strong communication skills and the ability to work closely with technical and non-technical stakeholders.
• Experience delivering AWS to Azure migrations.
• Experience within financial services or other regulated environments.
• Knowledge of NIST, CIS or similar security frameworks.
• Exposure to AI governance and security controls.
• Microsoft cloud certifications.

What's on Offer;

• Opportunity to play a key role in shaping a growing Azure platform.
• Direct access to senior technology leadership.
• High level of ownership and technical influence.
• Exposure to cloud, data and AI initiatives within a modern engineering environment.