India - Fabric Platform Engineer

Inchcape Shipping Services; India; Remote; INR 4,000,000 - 6,000,000; Full time

Benefits offered by this job

Retirement savings plan

Life assurance

Healthcare

Career development

Job summary

Inchcape Shipping Services seeks a senior Fabric Platform Engineer to own the technical foundations of the Data & Reporting Platform. You will manage the production-grade Fabric environment, CI/CD pipelines, access controls, and security models across global operations.

You will collaborate with the Enterprise Data Architect and Cloud teams, ensuring observability, reliability, and scalable automation using Power Platform and Azure services.

Qualifications

• 5+ years in platform engineering or data DevOps with production responsibility.
• Hands-on with Microsoft Fabric workspace administration and deployment pipelines.
• Strong Azure DevOps, CI/CD, and release management experience.
• IaC experience using Terraform is mandatory.

Responsibilities

• Operate Fabric platform infrastructure and environment separation (Dev/UAT/Prod).
• Own hybrid connectivity between source systems and Fabric, incl. VPN and VPC Peering.
• Build/maintain CI/CD pipelines for Fabric artefacts across environments.
• Manage access controls, service principals, secrets rotation, and IAM reviews.
• Configure Power BI embedding, authentication flows, and RLS for internal and external users.
• Monitor platform, pipelines, gateway, and EC2 performance; define incident triage.

Skills

Platform engineering

Azure DevOps

Terraform IaC

Python scripting

PowerShell scripting

Security & IAM

Hybrid cloud knowledge

Education

Bachelor's degree in computer science or related field

Tools

Azure DevOps

Terraform

Power BI

AWS EC2

Entra ID / Azure AD

Git

Job description

Who are Inchcape At Inchcape Shipping Services, our vision is to create a connected world where customers can trade successfully and make informed decisions in every port, everywhere. We achieve this by combining our worldwide infrastructure with local expertise, through our global network of more than 250 proprietary offices and a team of over 3,000 dedicated professionals. Our diverse customer base includes owners and charterers in the oil, cruise, container, and bulk commodity sectors, as well as naval, government, and intergovernmental organizations.

We have an ambitious growth model, and a career here is certainly going to be a rewarding one that will allow you to bring your skills & experience. We embrace change and are open to new thinking and pushing for positive change in our industry.

Job Location : Remote

Contract Type : Permanent

Main Purpose of Job

The Fabric Platform Engineer owns the technical foundations of ISS's Data & Reporting Platform a production-grade Microsoft Fabric environment that serves as the single source of truth for operational and commercial reporting across a global maritime shipping business operating in 60+ countries.

This role is responsible for the infrastructure, DevOps, connectivity, security model, and operational reliability of the platform. The Fabric Platform Engineer ensures that the gateway and network connectivity between ISS source systems and Fabric are always-on and production-grade; that platform artefacts are deployed safely and repeatably through CI/CD pipelines; that access controls, service principals, and secrets are correctly managed; and that the platform is observable, monitorable, and recoverable under production conditions.

This is a founding permanent role within the Fabric Data Team, assuming ownership of capabilities currently held by the external project delivery team. The role requires a professional who can operate independently at a senior level, takes end-to-end ownership of platform reliability, and understands that the platform's availability directly affects ISS's ability to serve its external shipping principal customers.

Key Accountabilities

• Operate the Microsoft Fabric platform infrastructure including workspace topology, capacity allocation, and environment separation (Dev / UAT / Prod).
• Own the hybrid connectivity layer between ISS source systems (OpticDB, World of Ports, Boomi, Eye-Share, Unit4) and Fabric, including AWS-hosted On-Premises Data Gateway clusters, site-to-site VPN configurations, and VPC Peering. Ensure gateway high availability in production through clustered EC2 configurations managed via Terraform.
• Build and maintain CI/CD pipelines in Azure DevOps for automated deployment of Fabric artefacts across environments. Define and enforce the branching strategy, pull request governance, and release process for all platform assets stored in Azure DevOps Git repositories.
• Implement and govern the platform access model: Entra ID (Azure AD) group structure, workspace RBAC assignments, and environment-specific permission controls. Own the Service Principal strategy, credential lifecycle management, secrets rotation via Azure Key Vault, and IAM review cadence.
• Configure and maintain the Power BI App Owns Data embedding architecture for internal ISS applications (e.g. Optic / OneCape), including authentication flows, workspace access grants, and Row-Level Security (RLS) validation for both internal users and external shipping principals (B2B guest identities).
• Implement and manage platform monitoring across all layers: Fabric capacity utilisation dashboards, pipeline execution health, gateway connectivity, and EC2 instance performance via Amazon CloudWatch. Define alerting thresholds, escalation paths, and own first-line incident triage for infrastructure-level issues.
• Onboard new data sources using the established ingestion framework and connectivity patterns, without requiring bespoke infrastructure changes. Manage new external customer onboarding: create Entra ID security groups, grant workspace access, and insert Row-Level Security entries into the Gold Warehouse per the agreed process.
• Own the Fabric capacity cost model: conduct monthly reviews of CU consumption across Non-Prod and Prod capacities, attribute costs by workload, and report findings with scaling recommendations to the Head of Fabric Data Platform.
• Support the Enterprise Data Architect in registering Gold data assets in Microsoft Purview: metadata tagging, lineage documentation, and ownership assignment. Contribute to platform development standards, naming conventions, and engineering artefact templates.
• Identify opportunities to automate operational workflows using Power Automate and the broader Microsoft Power Platform, including licence request approval flows, platform alert notifications, and data pipeline trigger automation.
• Stay current with the Microsoft Fabric and Azure DevOps roadmap; evaluate new features and capabilities relevant to ISS's platform model and advise the team on adoption opportunities.

Key Deliverables:

• A production-grade Fabric platform infrastructure managed as code (Terraform), with documented gateway architecture, environment topology, and deployment runbooks available in Azure DevOps.
• Fully operational CI/CD pipelines for Fabric artefact promotion across Dev / UAT / Prod, with enforced branching strategy and auditable release history.
• A defined and implemented platform access model: Entra ID group structure, RBAC assignments, Service Principal inventory, Key Vault secrets management, and quarterly access review records.
• Functioning App Owns Data Power BI embedding for the Optic and OneCape applications, with documented authentication flows, RLS configurations per shipping principal, and onboarding runbook.
• Platform observability dashboards and alerting configurations across Fabric capacity, pipeline health, and gateway infrastructure; documented incident response and escalation paths.
• Monthly cost and capacity reports for Fabric platform capacities, with utilisation trends and scaling recommendations, delivered to the Head of Fabric Data Platform.
• Operational runbooks for all recurring BAU activities: data source onboarding, customer reporting onboarding, Power BI Pro licence management, and secrets rotation.
• Implement the Microsoft recommended resilient model for components and products of the Data Platform to ensure Availability, Disaster Recovery and Business Continuity

Competency Requirements

Technical

Cloud infrastructure & IaC (Terraform)

Azure DevOps & CI/CD pipelines

Microsoft Fabric platform administration

Hybrid network connectivity (VPN, gateways)

Identity & access management (Entra ID)

Lakehouse/Warehouse Administration

Key

Attention to detail & operational rigour

Problem solving & incident diagnosis

Communication & documentation

Stakeholder collaboration

Security & risk awareness

Management

Platform governance & standards

Change & release management

Planning & prioritisation

Operational ownership mindset

Knowledge, Experience and Skills

Essential

• 5+ years in a platform engineering, cloud engineering, or data DevOps role, operating production cloud infrastructure with uptime and reliability responsibilities.
• Hands-on experience with Microsoft Fabric: workspace administration, capacity management, Git integration with Azure DevOps, and Fabric Deployment Pipelines.
• Strong Azure DevOps experience: CI/CD pipeline authoring, branching strategies, pull request governance, and release management for data platform artefacts.
• Infrastructure-as-Code experience using Terraform (mandatory for gateway and EC2 management).
• Experience with Python or PowerShell scripting for platform automation tasks.
• Hands-on AWS experience: EC2 instance management, VPC and subnet configuration, Security Groups, CloudWatch monitoring.
• Experience managing On-Premises Data Gateways or SHIR runtimes in a production environment, including high availability cluster configuration and patching.
• Understanding of hybrid network connectivity: site-to-site VPN, VPC Peering, private subnets, and traffic routing.
• Solid understanding of Entra ID (Azure AD): security groups, service principals, B2B guest identities, and RBAC implementation.
• Experience with Power BI workspace administration, deployment pipelines, and publish-to-service workflows including App Owns Data embedding model.
• Familiarity with secrets management (Azure Key Vault or equivalent) and credential rotation practices.
• Strong written and verbal communication skills in English; ability to document architecture decisions and produce operational runbooks clearly.

Desirable

• Experience with Microsoft Purview: data asset registration, lineage management, and governance catalogue.
• Familiarity with Terraform Cloud or Terragrunt for multi-environment state management.
• Experience with AWS Systems Manager (SSM) for EC2 access and patch management.
• Knowledge of Power BI API automation: workspace provisioning, dataset refresh triggers, license management via REST API.
• Familiarity with Microsoft Power Automate and the Power Platform suite for building lightweight operational automation workflows.
• Prior exposure to maritime, logistics, or complex international supply chain environments.

Please note that this role requires you to visit our Chennai office once every quarter. The travel expenses for these visits will need to be covered at your own expense.

Education and Professional Qualification:

Essential

• Bachelor's degree in computer science, information systems, software engineering, or a related field.

Desirable

• AZ-104: Microsoft Azure Administrator, demonstrating hands-on Azure infrastructure management experience.
• AZ-400: Designing and Implementing Microsoft DevOps Solutions, demonstrating CI/CD and release engineering expertise.
• DP-700: Implementing Data Engineering Solutions Using Microsoft Fabric (Microsoft Certified)

Other Requirements

Essential

• Ability to work closely with global, distributed teams and communicate effectively across cultures and time zones.
• Willingness to take end-to-end ownership of platform reliability, including responding to production incidents outside standard business hours when required.
• Passion for data platform engineering and commitment to building infrastructure that scales reliably with business demand.
• Commitment to staying current with Microsoft Fabric, Azure DevOps, and AWS platform developments.

Desirable

• Additional language proficiency
• Experience in an MSP, managed platform, or shared services environment where multiple clients or workloads share the same platform infrastructure.

Why Inchcape Shipping Services?

We believe in building a diverse and high performing workforce, that works together to provide our customers with the exceptional service they deserve. To reach the highest standards we depend on our people, their welfare, training and expertise. We realise the value of our staff and know that your unique experiences, skills and passions will help you to build a rich and rewarding career in our dynamic industry.

Our values are at the centre of everything we do, and the successful candidate will be expected to demonstrate and fully adopt these:

Global Perspective - we connect the world and see the bigger picture.

The Power of People - we rely on the strength of local agent knowledge and relationships.

Progress - we adopt new thinking and push for positive change in our industry.

In return, we will offer you:

• A retirement savings plan
• Life assurance
• Healthcare
• Competitive salary
• Employee Assistance Programme
• Career development and progression opportunities
• Values Award celebration events
• Team building days
• Hybrid Working Model (Role Dependant)

Plus, much more!

Appointment to this role will be subject to satisfactory references and possession of a valid Right to Work documentation depending upon your geographical location.

Inchcape is an Equal Employment Opportunity Employer and equality, diversity and inclusion are at the centre of everything we do. We recognise that our customers, colleagues, contractors and other partners are central to our success and that we work in a diverse society. We acknowledge not only our legal, but also our moral responsibility to ensure all groups have equality of opportunity.