Azure Platform Lead Engineer — Governance & Automation

Intellias; Polska; On-site; PLN 250,000 - 380,000; Full time

Benefits offered by this job

Private medical care

Sport card

B2B contract

Birthday/ special occasions

E-learning accounts (Coursera, O'Relly

Udemy

Job summary

Cloud Hub seeks an Azure Lead Engineer to own the technical direction and engineering quality of its Azure platform. You will lead Azure Landing Zones, governance, security, networking, automation, reliability and cost management.

You will collaborate across Engineering, Architecture, Security, Product and Operations to deliver a secure, scalable platform for approved exception use cases in line with enterprise standards.

Qualifications

• 5+ years in cloud infrastructure, platform engineering, DevOps or SRE.
• Proven design and operation of enterprise Azure platforms and Landing Zones.
• Strong knowledge of Azure Policy, RBAC/PIM, Monitor, and cost controls.

Responsibilities

• Own Azure technical roadmap, reference architectures, standards and reusable patterns.
• Lead architecture reviews and communicate trade-offs clearly.
• Mentor engineers and strengthen peer review to reduce SME dependency.
• Design and operate enterprise Azure Landing Zones with governance and security.
• Drive IaC and automated lifecycle management with Git/CI‑CD tooling.
• Establish observability, operational readiness, backup/recovery and incident management.

Skills

Cloud infrastructure

Platform engineering

DevOps

SRE

Azure leadership

Leadership

Tools

Git

CI/CD

Python

PowerShell

Job description

The Azure Lead Engineer owns the technical direction and engineering quality of Cloud Hub’s enterprise Azure platform. This is a hands-on leadership role spanning Azure Landing Zones, governance, security, networking, automation, reliability and cost management. The role works across Engineering, Architecture, Security, Product and Operations to provide a secure, scalable and governed Azure platform for approved and documented exception use cases in alignment with enterprise architecture standards.

Our client is a large global enterprise operating across multiple markets, with a complex technology landscape and a strong focus on digital transformation and innovation. The organization is actively investing in modern cloud, data, and AI capabilities to enable scalable, secure, and highly automated solutions across its business.

Responsibilities

Platform strategy and technical leadership

• Own the Azure technical roadmap, reference architectures, standards and reusable implementation patterns.
• Lead architecture and design reviews; make pragmatic technical decisions and communicate trade-offs clearly.
• Mentor engineers, strengthen peer review and reduce dependency on individual subject-matter experts.

Landing Zones, governance and security

• Design, evolve and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services and workload guardrails.
• Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring and security-bydesign controls.
• Partner with Security, Architecture and Compliance teams to remediate risks and maintain audit-ready evidence.

Automation and platform engineering

• Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git and CI/CD pipelines.
• Build self-service subscription and platform capabilities with clear product interfaces, documentation and operational ownership.
• Control configuration drift, improve repeatability and minimise manual operational work.

Reliability, operations and optimisation

• Establish observability, operational readiness, backup/recovery and incident-management standards.
• Lead complex troubleshooting, root-cause analysis and engineering improvements arising from incidents and problems.
• Optimise resilience, performance and cost through capacity management, FinOps practices and measurable service outcomes.

Delivery and stakeholder leadership

• Translate strategy into a prioritised backlog; identify dependencies, risks, owners and escalation paths.
• Coordinate delivery across squads and stakeholders while maintaining architecture, security and engineering quality.
• Represent Cloud Hub in Azure decisions and explain technical recommendations to both engineering and business audiences.

Qualifications

Required Expertise

• Five or more years in cloud infrastructure, platform engineering, DevOps or SRE, including at least three years of hands-on Azure experience.
• Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones.
• Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics and cost controls.
• Strong Azure networking experience: hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls and ExpressRoute/VPN.
• Production experience with IaC tools, Git-based delivery, CI/CD and scripting such as Python or PowerShell.
• Demonstrated technical leadership, mentoring, stakeholder influence and delivery in a global enterprise environment.

Preferred Qualifications

• Experience with multi-cloud environments, platform-product operating models, SRE practices and organisational change.

Perks and Benefits:

• Fixed financial bonus issued upfront on a quarterly basis, covering the average market price of private medical care and sport card - B2B contract.
• Present on the occasion of birthday, wedding, child birth.
• E-learning accounts for Coursera, O'Relly, Udemy.