Senior Azure Platform Engineer: Landing Zones & CI/CD

af; Rzeszów; Hybrid; PLN 240,000 - 300,000; Full time

Job summary

Xebia seeks a senior Azure Platform Engineer in Poland to design, implement, and operate secure, scalable Azure platform capabilities. You will own Azure Landing Zones, including Platform and Application Landing Zones, and lead Azure networking, security tooling, and governance.

You will build and manage infrastructure with Terraform, design CI/CD and GitOps for infrastructure and observability, and mentor engineers while applying the Azure Well-Architected Framework.

Qualifications

• 7+ years of experience in cloud infrastructure, cloud networking, and platform engineering.
• Hands-on experience designing and implementing Azure Landing Zones, including Platform Landing Zone and Application Landing Zone concepts.
• Strong hands-on experience leading Azure networking, including VNets, peering, Virtual WAN, ExpressRoute, NSGs, Azure Firewall, and Application Gateway, with collaboration with Network Engineering on routing, segmentation, and hybrid connectivity.
• Strong working knowledge and ownership of Azure security tooling, including Microsoft Entra ID, Azure Policy, Defender for Cloud, and Key Vault.
• Deep hands-on experience with Terraform, including module design and state management; ARM/Bicep knowledge is a plus.
• Experience with infrastructure CI/CD and GitOps, automation, scripting, and Azure observability.
• Experience building developer-facing platforms, reusable templates, onboarding flows, or self-service capabilities.
• Strong understanding of the Azure Well-Architected Framework and its application to security, reliability, cost optimization, operational excellence, and performance efficiency.
• Strong ownership, communication, and collaboration skills, with ability to influence across technical teams and mentor others.
• Experience working in Agile environments and across Windows and Linux.
• Practical experience applying Generative AI tools to development, diagnostics, automation, or infrastructure tasks.
• Good command of English (min. B2).

Responsibilities

• Design, implement, and operate secure and scalable Azure platform capabilities.
• Own Azure Landing Zones, including Platform and Application Landing Zones.
• Lead Azure networking, including VNets, peering, Virtual WAN, ExpressRoute, NSGs, Azure Firewall, and Application Gateway.
• Collaborate with Network Engineering on routing, segmentation, and hybrid connectivity.
• Own Azure security and governance using Microsoft Entra ID, Azure Policy, Defender for Cloud, and Key Vault.
• Build and manage infrastructure using Terraform and Infrastructure as Code.
• Design and maintain CI/CD and GitOps processes for infrastructure, automation, and observability.
• Build developer-facing platform capabilities, reusable templates, and self-service solutions.
• Apply Azure Well-Architected Framework to design decisions for security, reliability, cost optimization, and performance.
• Mentor engineers and support adoption of platform engineering practices.

Skills

Azure platforms

Landing Zones

Azure networking

Security tooling

Terraform

CI/CD

GitOps

Observability

Azure Well-Architected

Mentoring

Tools

Terraform

ARM/Bicep

Azure DevOps

Job description

Xebia seeks a senior Azure Platform Engineer in Poland to design, implement, and operate secure, scalable Azure platform capabilities. You will own Azure Landing Zones, including Platform and Application Landing Zones, and lead Azure networking, security tooling, and governance.

You will build and manage infrastructure with Terraform, design CI/CD and GitOps for infrastructure and observability, and mentor engineers while applying the Azure Well-Architected Framework.