Senior Azure Platform Engineer

Poland and Central-Eastern Europe; Polska; Remote; PLN 210,000 - 360,000; Full time

Job summary

Xebia in Poland and Central-Eastern Europe region is recruiting a Senior Cloud Platform Engineer to design, implement, and operate scalable Azure platform capabilities. You will lead landing zones, networking, security tooling, and IaC with Terraform, aligned to Well-Architected principles.

The role demands 7+ years of hands-on cloud infrastructure experience, Azure delivery at scale, and mentoring engineers.

Qualifications

• 7+ years of experience in cloud infrastructure and platform engineering with Azure delivery at scale.
• Hands-on Azure Landing Zones design and implementation.
• Strong Azure networking and security tooling ownership.
• Terraform experience; ARM/Bicep knowledge is a plus.
• Experience with CI/CD, GitOps, automation, and observability.
• Proficient English communication (B2 or higher).

Responsibilities

• Design, implement, and operate secure, scalable Azure platform capabilities.
• Lead Azure Landing Zones for Platform and Application.
• Manage Azure networking including VNets, ExpressRoute, NSGs, and Firewalls.
• Collaborate with Network Engineering on routing and hybrid connectivity.
• Own Azure security tools and governance (Entra ID, Defender, Key Vault).
• Build IaC with Terraform and ensure CI/CD and GitOps for platforms.
• Develop developer-facing platform capabilities and self-service templates.
• Apply the Azure Well-Architected Framework to security, cost, reliability, and performance.
• Mentor engineers and promote platform engineering practices.

Skills

Cloud infrastructure

Cloud networking

Platform engineering

Leadership/Mentoring

Agile collaboration

English proficiency

Tools

Terraform

Azure

ARM/Bicep

GitOps

CI/CD

Security tooling

Job description

Xebia is a global AI-first, digital transformation, and engineering partner. With over 25 years of experience and a team of 5,000 professionals across 16 countries, we help organizations design and build scalable products, platforms, and data-driven solutions.

We specialize in Artificial Intelligence, Data and Cloud, Intelligent Automation, and Digital Products, combining deep technical expertise with a strong focus on engineering excellence and a people-first culture.

In the CEE region, we're a team of nearly 1,000 experts delivering modern applications, data platforms, and AI solutions for clients such as Millennium, ING, Play, Edenred, Arabian Drilling, FedEx, Leroy Merlin, Truecaller, Volotea, Schmitz Cargobull, and many, many more.

You will be:

• designing, implementing, and operating secure and scalable Azure platform capabilities,
• designing and implementing Azure Landing Zones, including Platform and Application Landing Zones,
• leading Azure networking, including VNets, peering, Virtual WAN, ExpressRoute, NSGs, Azure Firewall, and Application Gateway,
• collaborating with Network Engineering on routing, segmentation, and hybrid connectivity,
• owning Azure security and governance, including Microsoft Entra ID, Azure Policy, Microsoft Defender for Cloud, and Azure Key Vault,
• building and managing infrastructure using Terraform and Infrastructure as Code,
• designing and maintaining CI/CD and GitOps processes for infrastructure, automation, and observability,
• building developer-facing platform capabilities, reusable templates, and self-service solutions,
• applying the Azure Well-Architected Framework and Generative AI tools to platform design, automation, diagnostics, and continuous improvement,
• collaborating with technical teams, mentoring engineers, and supporting the adoption of platform engineering practices.

Your profile:

• 7+ years of experience in cloud infrastructure, cloud networking, and platform engineering, with demonstrable Azure delivery at scale,
• hands-on experience designing and implementing Azure Landing Zones , including Platform Landing Zone and Application Landing Zone concepts,
• strong hands-on experience leading Azure networking, including VNets, peering, Virtual WAN, ExpressRoute, NSGs, Azure Firewall, and Application Gateway, with experience collaborating with Network Engineering on routing, segmentation, and hybrid connectivity,
• strong working knowledge and ownership of Azure security tooling, including Microsoft Entra ID, Azure Policy, Microsoft Defender for Cloud, and Azure Key Vault,
• deep hands-on experience with Terraform, including module design and state management; knowledge of ARM/Bicep is a plus,
• experience with infrastructure CI/CD and GitOps, automation, scripting, and Azure observability,
• experience building developer-facing platforms, reusable templates, onboarding flows, or self-service capabilities,
• strong understanding of the Azure Well-Architected Framework and its application across security, reliability, cost optimization, operational excellence, and performance efficiency,
• strong ownership, communication, and collaboration skills, with the ability to influence across technical teams and mentor others,
• experience working in Agile environments and across Windows and Linux,
• practical experience applying Generative AI tools to development, diagnostics, automation, or infrastructure tasks,
• good command of English (min. B2).

Work from the European Union region and a work permit are required.

Nice to have:

• experience applying GenAI in a more structured way within the SDLC, including defined workflows, prompt patterns, or tool integrations embedded into daily work,
• i Interest in and familiarity with emerging AI-driven practices (e.g. agent-based workflows, automation patterns, AI-augmented development), with a willingness to explore and experiment beyond standard approaches.

Recruitment Process:

CV review - HR call - Technical Interview - Client Interview - Decision