platform engineer Landing Zone

Enfint; Warszawa; Hybrid; PLN 210,000 - 270,000; Full time

Job summary

Nordea Bank Abp ищет опытного инженерa облачной инфраструктуры для разработки и поддержки Landing Zone в рамках гибридной работы. Ваша задача — проектировать и внедрять инфраструктуру как код, автоматизировать операции и обеспечивать устойчивость среды Azure на корпоративном уровне.

Требуется глубокий опыт в Azure, Terraform и CI/CD, а также навыки Python и Bash. Привлекательная часть — участие в DevOps подходе, сотрудничество с командами и возможность работать в одном из крупнейших банков

Qualifications

• 5+ лет практического опыта облачных технологий в Azure на уровне предприятия.
• Практический опыт проектирования и эксплуатации Azure Landing Zone по методологии CAF/Enterprise‑Scale.
• Сильное владение Terraform как инструментом IaC.
• Надежные навыки Ansible для конфигурации и автоматизации.
• Умение писать код на Python и Bash.
• Опыт построения CI/CD пайплайнов и мониторинга.
• Понимание сетевых технологий Azure: VNet, hub‑and‑spoke, ExpressRoute, соединение с локальной сетью и zero trust.

Responsibilities

• Разработка и сопровождение Landing Zone инфраструктуры как код с использованием Terraform.
• Управление конфигурацией через Ansible и автоматизация операций.
• Разработка и поддержка CI/CD процессов для изменений Landing Zone.
• Проектирование сетевой основы и гибридного подключения между Azure и локальными центрами.
• Руководство инцидентами P1/P2 и анализ причин с улучшением процессов.

Skills

Azure

Terraform

Ansible

Python

Bash

CI/CD

Azure networking

Zero trust

Education

Степень в области CS/IT

Tools

Terraform

Ansible

Docker

Kubernetes

AKS

Job description

Описание

Nordea operates as a major Nordic bank whose technology organisation supports business strategy, customer services, security, compliance, and reliable banking operations. Its Cloud Platform Team owns and evolves enterprise cloud platforms that support application teams throughout their cloud journey.

Задачи

Build and maintain Landing Zone infrastructure as code with Terraform, manage configuration with Ansible, and write Python and Bash automation for provisioning and ongoing operations; Build central, reusable Landing Zone solutions for application teams; Design and run CI/CD pipelines for Landing Zone changes, maintain pipeline health, and set up automated testing for platform components; Contribute to a genuine DevOps way of working; Raise and review pull requests and contribute to architecture documentation; Identify automation gaps and eliminate repeatable manual work; Design the networking foundation across subscription and management group structures, including VNets, subnets, network security groups, route tables, hub-and-spoke topology, and workload segmentation; Build and operate hybrid connectivity between Azure and on-premises data centres using ExpressRoute and VPN Gateway; Apply zero trust principles using Entra ID, Azure RBAC, Azure Policy, and network segmentation; Set governance guardrails and best practices based on Azure Landing Zones, the Cloud Adoption Framework, management group hierarchy, and policy-as-code; Build platform observability and monitoring dashboards; Lead P1/P2 incident response, drive resolution, perform root cause analysis, coordinate across teams, and improve procedures.

Требования

5+ Years of hands‑on cloud engineering experience with strong, current Azure experience at enterprise scale; Practical experience designing and running an Azure Landing Zone, ideally following the Cloud Adoption Framework / Enterprise‑Scale approach; Strong command of Terraform for infrastructure as code; Solid Ansible skills for configuration and automation; Good programming ability in Python and Bash; Experience building CI/CD pipelines; Strong understanding of Azure networking, including VNet and hub‑and‑spoke design, ExpressRoute, on‑premises connectivity, and zero trust access design; Nice to have: A degree in Computer Science, Information Technology, or a related field, Azure Solutions Architect Expert or DevOps Engineer Expert certification, Docker and Kubernetes experience including AKS, familiarity with security frameworks and compliance standards, monitoring and observability tooling experience with Azure Monitor, Prometheus, Grafana, or ELK, ITIL or similar service management background, comfort working in an agile setup.

Условия

Hybrid working model; A culture that fosters performance and growth in one of the largest Nordic banks; Opportunities to evolve, develop, and learn from colleagues with diverse backgrounds; Only for candidates in Finland: A security clearance will be performed for the person selected for this position; Only for candidates in Poland: Please include permit for processing personal data in CV as following: In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp; Job ID: 5906.