CloudOps Engineer

Planet; Galway; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Planet seeks a Cloud Operations Engineer with deep Microsoft Azure networking expertise to operate, secure, and improve cloud and hybrid network services. You will own Azure connectivity, automate deployments, and diagnose complex connectivity issues across cloud and on-prem environments.

Ideal candidates have strong networking fundamentals, Terraform IaC experience, and a track record of supporting regulated industries. Hybrid work model and on-call rotation are offered.

Qualifications

• Advanced expertise in Microsoft Azure networking and hybrid cloud architectures.
• Experience securing and monitoring cloud networks in regulated environments is desirable.
• Ability to design hub-and-spoke and Virtual WAN architectures.

Responsibilities

• Operate, maintain, and improve high-availability Azure and hybrid cloud networks.
• Design and support hub-and-spoke and Virtual WAN architectures with related services.
• Manage network security controls including NSGs, Azure Firewall, WAF, DDoS, and segmentation.
• Operate hybrid connectivity using ExpressRoute, VPNs, and on-prem integration.
• Support DNS and application delivery via Load Balancer, Application Gateway, Front Door, and third-party appliances.
• Develop Infrastructure as Code with Terraform and enforce peer review and testing.
• Monitor network health, latency, capacity, and security signals with Azure Monitor and Network Watcher.
• Lead or support incident response and root cause analysis for production services.
• Collaborate with security and platform teams to ensure reliable connectivity.
• Maintain network documentation, runbooks, and disaster recovery plans.

Skills

Azure networking

Network security

Troubleshooting connectivity

Terraform / IaC

PowerShell / Python scripting

Documentation & communication

Tools

Azure Virtual Network

Azure Firewall

ExpressRoute

Private Link / Private DNS

Terraform

Azure Monitor / Network Watcher

Job description

About Planet

Planet is a global provider of integrated technology and payments solutions for retail and hospitality customers.

We create great experiences for the millions of people who use our payments, software, and tax-free solutions every minute of every day.

Planet empowers its customers to deliver great customer experiences by combining payments and software in ways that drive greater loyalty, increase revenue and save time.

Founded over 35 years ago and with our headquarters in London, today we have more than 2,500 employees located across six continents serving our customers in more than 120 markets.

Role Overview

We are seeking a highly skilled Cloud Operations Engineer with deep expertise in Microsoft Azure networking to join our Cloud & Infrastructure Services team. The ideal candidate will operate, secure, troubleshoot, and continuously improve cloud and hybrid network services that support business-critical platforms.

This role combines strong cloud operations capability with advanced knowledge of network architecture and protocols. The successful candidate will take ownership of Azure connectivity and network security services, support hybrid connectivity with on-premises and other cloud environments, automate network deployment and configuration, and lead the diagnosis and resolution of complex connectivity and performance issues.

Previous experience working within regulated industries (e.g., payments, financial services, PCI-DSS, healthcare, or other compliance-driven environments) is highly desirable.

What you will do

• Operate, maintain, and improve highly available Azure and hybrid cloud network services.
• Design and support Azure hub-and-spoke and Virtual WAN architectures, virtual networks, subnets, peering, user-defined routes, NAT Gateway, Private Link, private endpoints, and service endpoints.
• Manage network security controls including Network Security Groups, Azure Firewall, Web Application Firewall, DDoS Protection, network segmentation, and controlled ingress and egress.
• Operate hybrid connectivity using ExpressRoute, site-to-site and point-to-site VPNs, BGP, and integration with on-premises routing and security platforms.
• Support Azure DNS, Private DNS, DNS forwarding and resolution across hybrid environments, and application delivery through Azure Load Balancer, Application Gateway, Front Door, and third-party appliances.
• Develop and maintain Infrastructure as Code using Terraform, applying peer review, testing, and controlled deployment practices to network changes.
• Monitor network health, flow, latency, availability, capacity, and security signals using Azure Monitor, Network Watcher, logs, and observability platforms.
• Troubleshoot complex issues across DNS, routing, firewalls, load balancing, TLS, connectivity, and application network paths.
• Lead or support incident response, root cause analysis, problem management, maintenance, and service restoration for production infrastructure.
• Collaborate with security, platform engineering, application, and enterprise network teams to deliver secure and reliable connectivity.
• Maintain network documentation, diagrams, operational procedures, standards, and runbooks, and contribute to disaster recovery and capacity planning.

Who you are

• Extensive hands-on experience operating Microsoft Azure infrastructure, with advanced expertise in Azure networking.
• Strong knowledge of TCP/IP, IPv4 addressing and subnetting, DNS, DHCP, NAT, routing, BGP, VPNs, proxies, load balancing, TLS, and network security principles.
• Deep experience with Azure Virtual Network, peering, routing, NSGs, Azure Firewall, Private Link, Private DNS, ExpressRoute, VPN Gateway, Load Balancer, Application Gateway, Front Door, and Network Watcher.
• Proven ability to troubleshoot end-to-end connectivity and performance across cloud, on-premises, and hybrid environments using packet captures, flow logs, route analysis, DNS tools, and platform telemetry.
• Experience with enterprise firewalls, network virtual appliances, web application firewalls, and traffic management technologies.
• Experience using Terraform for repeatable, controlled Infrastructure as Code deployments.
• Experience operating production services, responding to incidents, managing changes, and completing root cause analysis.
• Scripting and automation experience using PowerShell, Azure CLI, Bash, Python, or similar technologies.
• Clear communication skills and the ability to produce accurate technical documentation and explain complex network issues to technical stakeholders.

Nice to Have

• Experience with Fortinet, F5, or comparable enterprise firewall and application delivery platforms.
• Experience with Azure Virtual WAN, Azure Route Server, multi-region connectivity, and multi-cloud networking.
• Knowledge of Zero Trust networking, PCI-DSS controls, and network segmentation in regulated environments.
• Experience with monitoring and observability platforms and analysis of network and security telemetry.

Preferred Experience

• Experience working in regulated environments such as payments, financial services, banking, healthcare, or other compliance-driven industries.
• Relevant certifications such as Azure Network Engineer Associate, Azure Administrator Associate, Azure Solutions Architect Expert, or recognized enterprise networking certifications.

On-Call Requirements

This position supports business-critical production infrastructure and network services. Participation in an on-call rotation is expected, and candidates must be willing to provide out-of-hours support for connectivity incidents, security events, maintenance activities, and service restoration.

Why Planet:

Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.

Come and grow your career in the most exciting, fast paced technology market, with a business that delivers feel-good connected commerce.

At Planet, we embrace a hybrid work model, with three days a week in the office.

Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.