DevOps Engineer

Intellias; Portugal; On-site; EUR 90,000 - 130,000; Full time

Job summary

Intellias, on behalf of its Cloud Hub client, seeks an Azure Lead Engineer to own the technical direction of a secure, scalable Azure platform. This hands-on leadership role covers Landing Zones, governance, security, networking, automation and cost management across multi-subscription deployments.

You will collaborate with Engineering, Architecture, Security, Product and Operations to deliver enterprise-grade cloud solutions, balancing risk, performance and cost while guiding a diverse tech

Qualifications

• Five or more years in cloud infrastructure, platform engineering, DevOps or SRE, including at least three years of hands-on Azure experience.
• Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones.
• Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics and cost controls.
• Strong Azure networking experience: hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls and ExpressRoute/VPN.
• Production experience with IaC tools, Git-based delivery, CI/CD and scripting such as Python or PowerShell.
• Demonstrated technical leadership, mentoring, stakeholder influence and delivery in a global enterprise environment.

Responsibilities

• Own the Azure technical roadmap, reference architectures, standards and reusable implementation patterns.
• Lead architecture and design reviews; make pragmatic technical decisions and communicate trade-offs clearly.
• Mentor engineers, strengthen peer review and reduce dependency on individual subject-matter experts.
• Design, evolve and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services and workload guardrails.
• Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring and security-bydesign controls.
• Partner with Security, Architecture and Compliance teams to remediate risks and maintain audit-ready evidence.
• Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git and CI/CD pipelines.
• Build self-service subscription and platform capabilities with clear product interfaces, documentation and operational ownership.
• Control configuration drift, improve repeatability and minimise manual operational work.
• Establish observability, operational readiness, backup/recovery and incident-management standards.
• Lead complex troubleshooting, root-cause analysis and engineering improvements arising from incidents and problems.
• Optimise resilience, performance and cost through capacity management, FinOps practices and measurable service outcomes.
• Translate strategy into a prioritised backlog; identify dependencies, risks, owners and escalation paths.
• Coordinate delivery across squads and stakeholders while maintaining architecture, security and engineering quality.
• Represent Cloud Hub in Azure decisions and explain technical recommendations to both engineering and business audiences.

Skills

Cloud infrastructure

Azure expertise

IaC & automation

CI/CD

Python/PowerShell

Technical leadership

Security & governance

Stakeholder influence

Tools

Git

CI/CD tooling

PowerShell

Python

Azure Monitor

Log Analytics

Job description

The Azure Lead Engineer owns the technical direction and engineering quality of Cloud Hub's enterprise Azure platform. This is a hands-on leadership role spanning Azure Landing Zones, governance, security, networking, automation, reliability and cost management. The role works across Engineering, Architecture, Security, Product and Operations to provide a secure, scalable and governed Azure platform for approved and documented exception use cases in alignment with enterprise architecture standards.

Our client is a large global enterprise operating across multiple markets, with a complex technology landscape and a strong focus on digital transformation and innovation. The organization is actively investing in modern cloud, data, and AI capabilities to enable scalable, secure, and highly automated solutions across its business.

Requirements

• Five or more years in cloud infrastructure, platform engineering, DevOps or SRE, including at least three years of hands-on Azure experience.
• Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones.
• Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics and cost controls.
• Strong Azure networking experience: hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls and ExpressRoute/VPN.
• Production experience with IaC tools, Git-based delivery, CI/CD and scripting such as Python or PowerShell.
• Demonstrated technical leadership, mentoring, stakeholder influence and delivery in a global enterprise environment.

Preferred Qualifications

• Experience with multi-cloud environments, platform-product operating models, SRE practices and organisational change.

Responsibilities

• Own the Azure technical roadmap, reference architectures, standards and reusable implementation patterns.
• Lead architecture and design reviews; make pragmatic technical decisions and communicate trade-offs clearly.
• Mentor engineers, strengthen peer review and reduce dependency on individual subject-matter experts.
• Design, evolve and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services and workload guardrails.
• Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring and security-bydesign controls.
• Partner with Security, Architecture and Compliance teams to remediate risks and maintain audit-ready evidence.
• Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git and CI/CD pipelines.
• Build self-service subscription and platform capabilities with clear product interfaces, documentation and operational ownership.
• Control configuration drift, improve repeatability and minimise manual operational work.
• Establish observability, operational readiness, backup/recovery and incident-management standards.
• Lead complex troubleshooting, root-cause analysis and engineering improvements arising from incidents and problems.
• Optimise resilience, performance and cost through capacity management, FinOps practices and measurable service outcomes.
• Translate strategy into a prioritised backlog; identify dependencies, risks, owners and escalation paths.
• Coordinate delivery across squads and stakeholders while maintaining architecture, security and engineering quality.
• Represent Cloud Hub in Azure decisions and explain technical recommendations to both engineering and business audiences.