Azure Lead Engineer

Intellias; Portugal; On-site; EUR 100,000 - 180,000; Full time

Benefits offered by this job

Health Insurance

Permanent contract

22 days annual leave

3 paid sick leaves

Modern office in Porto

Job summary

Cloud Hub seeks an Azure Lead Engineer to own the technical direction and engineering quality of its enterprise Azure platform. The role covers Landing Zones, governance, security, networking, automation, reliability and cost management across Engineering, Architecture, Security, Product and Operations.

This hands-on leadership position drives platform strategy, delivery and collaboration with cross-functional teams to ensure a secure, scalable Azure environment aligned with enterprise

Qualifications

• Five or more years in cloud infrastructure, platform engineering, DevOps or SRE, including at least three years of hands-on Azure experience.
• Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones.
• Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics and cost controls.
• Strong Azure networking experience: hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls and ExpressRoute/VPN.
• Production experience with IaC tools, Git-based delivery, CI/CD and scripting such as Python or PowerShell.
• Demonstrated technical leadership, mentoring, stakeholder influence and delivery in a global enterprise environment.

Responsibilities

• Own the Azure technical roadmap, reference architectures, standards and reusable implementation patterns.
• Lead architecture and design reviews; make pragmatic technical decisions and communicate trade-offs clearly.
• Mentor engineers, strengthen peer review and reduce dependency on individual subject-matter experts.
• Design, evolve and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services and workload guardrails.
• Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring and security-by-design controls.
• Partner with Security, Architecture and Compliance teams to remediate risks and maintain audit-ready evidence.
• Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git and CI/CD pipelines.
• Build self-service subscription and platform capabilities with clear product interfaces, documentation and operational ownership.
• Control configuration drift, improve repeatability and minimise manual operational work.
• Establish observability, operational readiness, backup/recovery and incident-management standards.
• Lead complex troubleshooting, root-cause analysis and engineering improvements arising from incidents and problems.
• Optimise resilience, performance and cost through capacity management, FinOps practices and measurable service outcomes.
• Translate strategy into a prioritised backlog; identify dependencies, risks, owners and escalation paths.
• Coordinate delivery across squads and stakeholders while maintaining architecture, security and engineering quality.
• Represent Cloud Hub in Azure decisions and explain technical recommendations to both engineering and business audiences.

Skills

Azure

Cloud infrastructure

DevOps

SRE

Leadership

Governance

Security

Cost management

Networking

Tools

Git

CI/CD

Python

PowerShell

Terraform

Job description

The Azure Lead Engineer owns the technical direction and engineering quality of Cloud Hub’s enterprise Azure platform. This is a hands‑on leadership role spanning Azure Landing Zones, governance, security, networking, automation, reliability and cost management. The role works across Engineering, Architecture, Security, Product and Operations to provide a secure, scalable and governed Azure platform for approved and documented exception use cases in alignment with enterprise architecture standards.

Project Overview:

Our client is a large global enterprise operating across multiple markets, with a complex technology landscape and a strong focus on digital transformation and innovation. The organization is actively investing in modern cloud, data, and AI capabilities to enable scalable, secure, and highly automated solutions across its business.

Requirements:

• Five or more years in cloud infrastructure, platform engineering, DevOps or SRE, including at least three years of hands‑on Azure experience.
• Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones.
• Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics and cost controls.
• Strong Azure networking experience: hub‑and‑spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls and ExpressRoute/VPN.
• Production experience with IaC tools, Git‑based delivery, CI/CD and scripting such as Python or PowerShell.
• Demonstrated technical leadership, mentoring, stakeholder influence and delivery in a global enterprise environment.

- Preferred Qualifications

• Experience with multi‑cloud environments, platform‑product operating models, SRE practices and organisational change.

Responsibilities:

- Platform strategy and technical leadership

• Own the Azure technical roadmap, reference architectures, standards and reusable implementation patterns.
• Lead architecture and design reviews; make pragmatic technical decisions and communicate trade‑offs clearly.
• Mentor engineers, strengthen peer review and reduce dependency on individual subject‑matter experts.

- Landing Zones, governance and security

• Design, evolve and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services and workload guardrails.
• Implement policy‑driven governance, RBAC, privileged access, tagging, compliance monitoring and security‑by‑design controls.
• Partner with Security, Architecture and Compliance teams to remediate risks and maintain audit‑ready evidence.

- Automation and platform engineering

• Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git and CI/CD pipelines.
• Build self‑service subscription and platform capabilities with clear product interfaces, documentation and operational ownership.
• Control configuration drift, improve repeatability and minimise manual operational work.

- Reliability, operations and optimization

• Establish observability, operational readiness, backup/recovery and incident‑management standards.
• Lead complex troubleshooting, root‑cause analysis and engineering improvements arising from incidents and problems.
• Optimise resilience, performance and cost through capacity management, FinOps practices and measurable service outcomes.

- Delivery and stakeholder leadership

• Translate strategy into a prioritised backlog; identify dependencies, risks, owners and escalation paths.
• Coordinate delivery across squads and stakeholders while maintaining architecture, security and engineering quality.
• Represent Cloud Hub in Azure decisions and explain technical recommendations to both engineering and business audiences.

What we offer:

• 22 days of annual leave per year + 3 paid sick leaves;
• Permanent contract;
• Health Insurance (employee);
• Modern, well‑equipped office in the centre of Porto;