Azure Solutions Engineer (w/ Architecture Work)

Hammerjack Pty Ltd; Central Luzon; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Benefits offered by this job

HMO insurance from day 1

Vacation and sick leave credits

Company-issued laptop

Employee Referral Program

Flexible working hours

WFH options

Job summary

Hammerjack Pty Ltd seeks an experienced Azure Solutions Engineer to lead the Azure platform, focusing on CI/CD pipelines, IaC, and governance. The role bridges hands-on engineering and architecture, ensuring secure, scalable cloud delivery and data integration patterns across hybrid deployments.

You will collaborate with IT Platform Services, Cybersecurity, Enterprise Architecture, and Data teams to define landing zone architecture, policy standards, and cloud controls while enabling efficient,

Qualifications

• 6+ years hands-on Microsoft Azure experience, with 3+ years in enterprise solutions.
• Experience designing enterprise-grade Azure landing zones (CAF/ALZ or equivalent).
• Proficient in IaC using Terraform or Bicep and scripting with PowerShell or Bash.
• Experience with Azure API Management and secure cloud governance.

Responsibilities

• Design, build, and maintain CI/CD pipelines for IaC and app deployments.
• Implement IaC using Bicep/Terraform with landing zone standards.
• Develop deployment pipelines for containerized workloads and serverless components.
• Establish pipeline security, policy-as-code, and compliance gates.
• Provide architectural guidance for Azure platform decisions and governance.

Skills

Azure

CI/CD

Architecture

IaC

Security

Education

Bachelor's degree in Computer Engineering or Software Engineering

Tools

Azure DevOps Pipelines

GitHub Actions

Terraform

Bicep

PowerShell

Bash

AKS

Job description

We are seeking an experienced Azure Solutions Engineer (with Architecture work) to establish and drive the implementation, strategic architecture, governance, and technical foundation of our Microsoft Azure platform. While the role focuses on engineering the CI/CD pipelines that deliver platform and application changes into it, it will also cover managing architecture and governance. The role thus sits at the intersection of hands-on platform engineering and architecture, with an emphasis on data and integration patterns. This is a dual-mandate role: roughly 60-70% engineering/build and 30–40% architecture.

The Azure Solutions Engineer will work closely with IT Platform Services, Cybersecurity, Enterprise Architecture, IT Application Services, Network, and Data teams to develop a scalable, secure, and well-governed Azure environment supporting possibly both Azure Cloud and Azure Local deployments.

Responsibilities

Platform Engineering

• Design, build, and maintain CI/CD pipelines (Azure DevOps and/or GitHub Actions) for infrastructure-as-code and application deployments.
• Implement Infrastructure-as-Code using Bicep and/or Terraform, with modular, reusable templates aligned to landing zone standards.
• Build and maintain deployment pipelines for containerized workloads (AKS, Azure Container Apps) and serverless components (Azure Functions, Logic Apps).
• Establish pipeline security practices: secret scanning, dependency scanning, policy-as-code (Azure Policy / OPA), and compliance gates.
• Support platform observability: monitoring, alerting, and logging pipeline for deployed workloads (Azure Monitor, Log Analytics, Application Insights).

Platform Architecture

• Architecture: Act as technical authority for Azure platform decisions — IaaS, PaaS, networking, identity, security posture. Own and evolve the Azure landing zone architecture following the Cloud Adoption Framework (CAF), including hub-and-spoke network topology and management group hierarchy with Architecture team.
• Governance and Standards: Establish Azure governance, policies, standards, ADRs, and enterprise cloud controls while driving compliance, architecture governance, and cloud capability maturity with Architecture & Digital Business Transformation teams.
• Networking and Infrastructure: Design and govern secure Azure networking, hybrid connectivity, private networking, and infrastructure architecture across cloud and on-premises environments. Define and maintain standards for network segmentation, private endpoints, hybrid/on-prem connectivity, internet egress/ingress, and key/secrets management.
• Security Architecture: Establish Azure security baselines, Zero Trust architectures, security controls, and governance to support compliance and secure-by-design principles with Cybersecurity team.
• Cloud Engineering Standards: Define Infrastructure-as-Code, automation, reusable deployment patterns, and cloud engineering standards using tools such as Terraform and Bicep.
• Data & Integration: Provide architectural guidance for Microsoft Fabric, event-driven integration, API management, and governed deployment of data and integration platforms with Digital Business Transformation team.
• Cost Management: Monitor cloud resource utilization, implementing FinOps strategies to optimize infrastructure costs without compromising performance or reliability with Digital Business Transformation team.
• Collaboration and Advisory: Act as the Azure technical authority, providing architectural leadership, mentoring, and guidance to enterprise, application, data, DevOps, and security teams.

Qualifications

• Bachelor's degree in Computer Engineering or Software Engineering in a related technical field or equivalent practical experience.
• Comfortable operating both as an architect (option analysis, trade-offs, governance) and as an engineer (writing and maintaining pipeline/IaC code directly).
• 6+ years of hands-on experience in Microsoft Azure, with at least 3+ years of experience designing enterprise-grade solutions on Microsoft Azure.
• Experience with Azure API Management.
• Proven experience designing and operating an Azure landing zone at enterprise scale (CAF/ALZ or equivalent).
• Strong hands-on engineering skills: IaC (Bicep or Terraform), scripting (PowerShell and/or Bash), and CI/CD tooling (Azure DevOps Pipelines or GitHub Actions).
• Solid understanding of Azure networking (hub-and-spoke, VNet peering, private endpoints, ExpressRoute/VPN), identity (Entra ID, RBAC, managed identities), and security fundamentals.
• Working knowledge of containerization and orchestration (Docker, AKS or Container Apps).
• Experience producing architecture documentation and decision records, and presenting to a review board or comparable governance body.
• Familiarity with integration patterns (event streaming, API management)

Preferred Qualifications

• Microsoft Certified:
• Azure Solutions Architect Expert (AZ-305),
• Azure DevOps Engineer Expert (AZ-400), or
• Azure Data Engineer Associate (DP-203)
• Experience with architecture frameworks (TOGAF preferred)
• Experience with hybrid and multi-cloud environments.
• Familiarity with NIST, ISO 27001, CIS Benchmarks, or similar security and governance frameworks.
• Experience with data (data integration and IoT) focused cloud environments.
• Experience with Microsoft Fabric and Data Vault.
• Familiarity with data platform concepts (data lakehouse / medallion architecture)
• Exposure to OT/IoT ingestion patterns (e.g., Event Hubs-based telemetry pipelines)
• Experience working in a regulated or infrastructure-heavy industry (datacenter, telco, financial services, utilities).
• Familiarity with ServiceNow or similar ITSM/CMDB platforms and their boundary with cloud infrastructure
• Experience with policy-as-code and compliance automation (Azure Policy, Defender for Cloud)

Benefits

• Be part of an epic team that prioritizes your personal and professional growth
• HMO insurance coverage starts from the 1st working day.
• Vacation and sick leave credits (pro-rated) start from the 1st working day.
• Company-issued laptop included to ensure smooth and efficient work experience
• Earn rewards with our Employee Referral Program
• Enjoy flexible working time that align with the client's core hours
• Flexible work location, several office locations across Metro Manila and work-from-home (WFH)
• Access to free training, certification programs, and fun community/social activities
• Collaborate in an international, multicultural working environment