Azure Platform Engineer

Sun Technologies; Johns Creek, Northern (GA, KY); Hybrid; USD 69,000 - 90,000; Full time

Benefits offered by this job

Medical Insurance

401(k)

Sick leave

Job summary

Sun Technologies seeks an Azure Platform Engineer to architect and implement enterprise cloud foundations per CAF, building reusable Terraform modules and automation to enable self-service provisioning. The role emphasizes governance, security guardrails, and scalable networking to support AKS, App Services, and SQL workloads.

The candidate will drive observability, cost governance, and platform product mindset, collaborating with DevOps teams to ensure maintainability and compliance across

Qualifications

• Architect Azure foundations and landing zones per CAF guidelines.
• Design reusable Terraform modules and deployment patterns for self-service consumption.
• Implement Azure governance, RBAC, Entra ID, and security guardrails.

Responsibilities

• Lead Azure Platform Engineering & Landing Zone Design.
• Extend Terraform platform with reusable modules and automation.
• Implement and manage Azure Policy, RBAC, Entra ID, and security guardrails.
• Design scalable Azure networking (hub-spoke, ExpressRoute, Firewall).
• Build platforms supporting AKS, App Services, SQL, and storage services.
• Establish monitoring and observability using Azure Monitor and Log Analytics.
• Create API-friendly infrastructure products with versioning and CI/CD integration.
• Define FinOps practices including cost governance and tagging standards.

Skills

Azure platform engineering

Terraform

CI/CD pipelines

DevOps practices

Tools

Azure

AVM

Terraform Enterprise

GitLab CI/CD

Azure Policy

Entra ID

ExpressRoute

Azure Monitor

Job description

: up to 4 months contract with possible extension

Job Description

Pay Range: $50- $65/hr. The pay rate may differ depending on your skills, education, experience, and other qualifications.

Featured Benefits: Medical Insurance in compliance with the ACA. 401(k). Sick leave in compliance with applicable state, federal, and local laws.

Job Description:

• Lead Azure Platform Engineering & Landing Zone Design: Architect and build Azure cloud foundations from the ground up, including tenant design, management group hierarchy, subscription vending/factory, governance, and enterprise-scale landing zones aligned with Microsoft Cloud Adoption Framework (CAF).
• Infrastructure as Code & Terraform Expertise: Extend an existing HCP Terraform platform by designing and developing reusable Azure infrastructure modules, workspaces, and deployment patterns using Terraform, with strong emphasis on automation, standardization, and self-service consumption.
• Azure Governance & Security: Implement and manage Azure Policy, RBAC, Entra ID, managed identities, custom roles, least-privilege access controls, and enterprise security guardrails across multiple subscriptions and environments.
• Enterprise Networking: Design and support scalable Azure networking solutions including hub-and-spoke architectures, ExpressRoute, Azure Firewall, Private Endpoints, Private DNS, and Azure Virtual Network Manager.
• Platform Services Architecture: Build and operationalize cloud platforms supporting services such as AKS, Container Apps, App Services, Azure Functions, Azure SQL, PostgreSQL Flexible Server, Storage Accounts, Key Vault, and customer-managed encryption keys.
• Observability & Cloud Operations: Establish monitoring, logging, and operational excellence practices using Azure Monitor, Log Analytics, and cloud-native observability frameworks integrated into platform offerings by default.
• Platform Product Mindset: Design infrastructure products and reusable services that enable DevOps teams to provision and manage environments independently, with focus on API/interface design, module versioning, backward compatibility, CI/CD pipelines, and long-term maintainability.
• FinOps & Cost Governance: Define and implement enterprise-scale cost management practices including tagging standards, chargeback/showback models, subscription budgets, Azure Cost Management, reservations, savings plans, and cost visibility across hundreds of subscriptions.

Preferred Qualifications:

• Experience with Azure Verified Modules (AVM), Defender for Cloud, HCP Terraform Enterprise, GitLab-based CI/CD, policy-as-code (Sentinel), and large-scale multi-subscription Azure environments.