platform engineer in legal services

Forsters LLP; Greater London; Presencial; GBP 90.000 - 120.000; Jornada completa

Descripción de la vacante

Forsters LLP seeks a Cloud Platform Engineer to design and maintain Azure serverless components, manage SQL databases, and automate resources with Terraform/Bicep. You will enforce security, governance, and CI/CD practices while mentoring peers across IT and applications teams.

Strong scripting, cross-team collaboration, and experience with Key Vault, RBAC, and monitoring are essential in this role within a professional services environment.

Formación

• Proven experience delivering secure and performant cloud environments with cross-team collaboration.
• Hands-on coding/scripting with PowerShell, Python, or Azure CLI.
• Extensive experience with Azure serverless and PaaS services (Functions, App Service, hosting models).
• Experience with infrastructure as code (Terraform, Bicep, ARM templates).
• Certificate management with Azure Key Vault and TLS/SSL rotation.
• Knowledge of Azure governance, Entra ID, RBAC and security best practices.
• Ability to monitor Power Apps/Power Automate health and telemetry.
• Strong documentation and communication skills for runbooks and SOPs.

Responsabilidades

• Design, configure, and maintain Azure serverless components.
• Oversee Azure SQL Databases and Managed Instances, backups, and connectivity.
• Manage certificates and secrets across Azure workloads with Key Vault and renewal workflows.
• Identify and resolve Azure infrastructure vulnerabilities with Security team.
• Provision resources using IaC (Terraform, Bicep, ARM) with governance alignment.
• Configure monitoring with Azure Monitor, Log Analytics, Application Insights.
• Develop platform standards, runbooks, and architectural documentation.
• Support CI/CD roadmap and deployment patterns for teams.
• Mentor colleagues on automation, governance, and cloud practices.
• Collaborate with stakeholders to optimize cost, security, and reliability.

Conocimientos

PowerShell

Python

Azure CLI

Azure Functions

Serverless

Azure SQL

Terraform

Bicep

ARM templates

Azure Monitor

Educación

Bachelor's degree or equivalent

Herramientas

Terraform

Azure DevOps

Ansible

Docker

Kubernetes

Descripción del empleo

Описание

Forsters LLP provides private wealth, real estate, corporate and commercial, and dispute resolution services to individuals, families, and businesses.

Задачи

Design, configure, and maintain Azure serverless components, including Azure Functions, Function Apps, App Service Plans, scaling models, host processes, and environment lifecycles Oversee Azure SQL Databases and Managed Instances, including availability, firewalls, private endpoints, Entra ID integration, performance monitoring, backups, and recovery readiness Manage certificates and secrets across Azure workloads using Azure Key Vault, App Service certificates, and SSL/TLS automation, including rotation, renewal, and lifecycle controls Identify, analyse, and resolve Azure infrastructure vulnerabilities, deployment issues, and configuration risks with the Security team Provision and maintain cloud resources using infrastructure as code, such as Terraform, Bicep, or ARM templates, with structured Resource Groups aligned with Microsoft Cloud Adoption Framework governance Perform health checks, administrative oversight, and capacity monitoring for Power Apps environments, Power Automate flows, and custom connections integrated with Azure platform services Establish curated Azure Deployment Environments and self-service infrastructure blueprints for Development, Applications, and wider IT teams Configure monitoring, observability, log aggregation, and operational metrics using Azure Monitor, Log Analytics, and Application Insights Work with Infrastructure, Applications, and Security Architects to align systems with Business Continuity and Disaster Recovery guidelines and ensure documented plans are regularly reviewed and tested Act as a third-level escalation point for IT Operations, troubleshoot cloud infrastructure issues, and work with vendor partners to maintain service levels and resolve complex problems Develop and maintain platform standards, guardrails, runbooks, architectural documentation, operational guides, and knowledge articles for Azure cloud services Contribute to future CI/CD and pipeline strategy, including roadmap definition, reusable deployment patterns, and operational handover requirements Support change management, incident resolution, problem management, service improvement, and other ad hoc cloud platform projects Collaborate with Development, Applications, Information Security, Infrastructure, Service Delivery, and project teams to design, govern, document, and support Azure platform services Partner with stakeholders to establish Azure best practice, define self-service patterns, and prioritise platform improvements that reduce risk and improve delivery confidence Mentor colleagues on automation, infrastructure as code, Azure governance, and operational handover practices Engage with vendors and technology partners to understand roadmaps, benchmark approaches, and ensure appropriate support, service levels, and root cause analysis for escalated issues

Требования

Proven experience collaborating across Development, Applications, Security, and Infrastructure teams to deliver secure and performant cloud environments Practical coding and scripting capability with PowerShell, Python, Azure CLI, or equivalent command-line tooling for operational automation Hands-on experience with Microsoft Azure serverless and PaaS services, including Azure Functions, Function Apps, App Service Plans, and related hosting models Experience administering Azure SQL Database and/or Managed Instance, including access controls, private connectivity, resource tiering, backup and recovery, and performance optimisation Experience with infrastructure as code, including Terraform, Bicep, or ARM templates, to deploy modular and repeatable cloud resources Experience managing certificates, TLS/SSL, domain bindings, secrets, and secret rotation using Azure Key Vault and automated renewal workflows Knowledge of Azure governance, networking, Resource Group boundary design, Microsoft Entra ID, RBAC, and information security best practice Ability to monitor, troubleshoot, and assess the operational health of Power Apps, Power Automate flows, and underlying connectors Experience configuring Azure Monitor, Log Analytics, Application Insights, and operational telemetry for platform health and incident response Strong technical documentation skills covering best practice guides, architecture records, standard operating procedures, runbooks, and support handover material Strong communication skills, attention to detail, and ability to manage multiple priorities in a busy professional services environment Будет плюсом: Strategic understanding of CI/CD and ability to help define a future roadmap for build and release pipelines using Git, GitHub Actions, or Azure DevOps; experience integrating infrastructure workflows with ITSM tools such as ServiceNow and maintaining accurate CMDB data through automation; experience with Ansible, Windows Server, Active Directory, Docker, Kubernetes, Azure Container Apps, or AKS; experience with Azure Cost Management, budgets, FinOps practices, and resource optimisation; familiarity with Azure Policy, automated security policy enforcement, and legal or regulated security baselines; experience in a legal, professional services, or regulated environment; a bachelor's degree in a related field or equivalent practical experience; AZ-104, AZ-305, AZ-400, or AZ-500 certification

Условия

Working hours are 9am-5.30pm, with flexibility for additional hours and on-call as required