Senior Cloud Platform Engineer (Azure) – Landing Zone

NordHR; Województwo pomorskie; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Hybrid working model

Salary and benefits package

Private healthcare and life insurance

Multisport / sports benefits

Training and professional certs

Job summary

NordHR is hiring a Senior Cloud Platform Engineer for a leading international financial organization. You will join a Cloud Platform team focused on Azure Landing Zone, building and operating enterprise cloud platforms and enabling secure, scalable deployments.

You will implement IaC with Terraform, manage configuration with Ansible, and automate with Python and Bash, while contributing to governance, security, and observability in a DevOps environment.

Qualifications

• Five plus years of hands-on cloud engineering experience with Azure at enterprise scale.
• Strong knowledge of Azure Landing Zone design and operations.
• Proficiency with Terraform for IaC and Ansible for configuration.

Responsibilities

• Build and maintain Azure Landing Zone infrastructure as code using Terraform.
• Develop central, reusable platform solutions for easy adoption by application teams.
• Design and maintain CI/CD pipelines for Landing Zone changes with automated testing.
• Work in a DevOps environment with code reviews and collaboration.
• Contribute to architecture documentation and governance of cloud platforms.

Job description

Job Offers

We are looking for a Senior Cloud Platform Engineer for our client – a leading international financial organization with a strong technology focus, whose digital solutions support millions of customers worldwide.

You’ll join a Cloud Platform team responsible for developing and operating enterprise cloud platforms. The role focuses on Azure Landing Zone, combining hands‑on engineering, automation, networking, security and platform governance.

What you’ll be doing:

• Build and maintain Azure Landing Zone infrastructure as code using Terraform, with configuration management through Ansible and automation using Python and Bash.
• Develop central, reusable platform solutions that application teams can easily adopt.
• Design, build and maintain CI/CD pipelines for Landing Zone changes, including automated testing of platform components.
• Work in a genuine DevOps environment, actively participating in pull requests, code reviews and technical discussions.
• Contribute to architecture documentation and continuously identify opportunities to improve automation and eliminate manual work.
• Design and maintain the Azure networking foundation, including VNets, subnets, NSGs, route tables, hub-and-spoke architecture and network segmentation.
• Build and operate hybrid connectivity between Azure and on‑premises data centers using ExpressRoute and VPN Gateway.
• Apply Zero Trust principles using Entra ID, Azure RBAC, Azure Policy and network segmentation.
• Establish cloud governance, security guardrails and best practices based on Azure Landing Zones and the Cloud Adoption Framework.
• Work with management groups, policy‑as‑code and governance standards to ensure a secure and compliant cloud environment.
• Build and improve observability, including dashboards and monitoring that provide visibility into the platform.
• Take part in P1/P2 incident response, lead root cause analysis and drive improvements to prevent recurring issues.

What we’re looking for:

• 5+ years of hands‑on cloud engineering experience, with strong and current Azure expertise at enterprise scale.
• Practical experience designing and operating an Azure Landing Zone, ideally based on Cloud Adoption Framework / Enterprise‑Scale principles.
• Strong knowledge of Terraform for Infrastructure as Code.
• Solid experience with Ansible for configuration and automation.
• Good programming and scripting skills in Python and Bash.
• Experience designing and maintaining CI/CD pipelines.
• Strong understanding of Azure networking, including:
  • VNet and hub‑and‑spoke architecture
  • Subnets, NSGs and route tables
  • ExpressRoute
  • VPN Gateway
  • Azure‑to‑on‑premises connectivity
• Understanding of Zero Trust architecture and Azure security concepts such as Entra ID, RBAC and Azure Policy.
• Experience working with cloud governance, security and operational reliability in an enterprise environment.

Nice to have

• Degree in Computer Science, IT or a related field.
• Experience with Docker and Kubernetes / AKS.
• Familiarity with security frameworks and compliance standards.
• Experience working with monitoring and observability tools such as Azure Monitor, Prometheus, Grafana or ELK.
• ITIL or similar service management experience.
• Experience working in an Agile environment.

The offer:

• Hybrid working model and flexible approach to where you work.
• Attractive salary and benefits package.
• Private healthcare and life insurance.
• Multisport / sports benefits.
• Budget and opportunities for training and professional certifications.
• Strong career development opportunities and access to international projects.
• Work with modern Azure technologies at enterprise scale.
• Collaboration with experienced cloud and technology specialists.
• Modern, comfortable office designed for collaboration, focused work and employee wellbeing.
• Diverse and inclusive international environment.
• Strong focus on work-life balance, learning and continuous development.