Platforms Engineer

We are looking for an experienced Platforms Engineer to join a global technology environment and take responsibility for the design, operation, security, and continuous improvement of Microsoft Azure and hybrid infrastructure platforms. The role combines strong Microsoft Azure, Entra ID, Windows/Linux Server, Infrastructure as Code, automation, security, observability, and platform operations expertise. The engineer will help design and maintain secure Azure landing zones, support global infrastructure services and business-critical environments, and act as an escalation point for complex platform issues. Key Responsibilities: Design, build, maintain, and optimise Microsoft Azure infrastructure and hybrid cloud environments. Design and maintain secure Azure landing zones, platform guardrails, policies, subscription structures, naming standards, and access controls. Manage and improve Microsoft Entra ID services, including RBAC, PIM, Conditional Access, MFA, SSO, SCIM, administrative units, and identity governance. Build, harden, patch, maintain, and decommission Windows Server and Linux workloads across Azure, VMware/ESXi, Azure Local/HCI, colocation, and on-premises environments. Support patching and lifecycle management, including virtual patching approaches for legacy operating systems where standard patching is not possible. Design and deploy infrastructure using Infrastructure as Code, primarily Terraform and Bicep, as well as ARMtemplates. Develop and maintain infrastructure automation using PowerShell, Azure Automation Runbooks, JSON, andYAML. Support Azure Automation Runbooks across cloud and hybrid environments, including Hybrid Worker configurations. Monitor platform health, capacity, availability, and performance using Azure Monitor, Log Analytics, Azure Managed Grafana, and related observability solutions. Ensure platform security and compliance through security hardening, CIS baselines, vulnerability remediation, identity controls, and certificate lifecycle management. Manage patching, upgrades, and infrastructure lifecycle activities using Azure Update Manager and automation. Participate in incident and problem management, including troubleshooting, root cause analysis, and implementation of long-term solutions. Act as an escalation point and subject-matter expert for Azure, Entra ID, and server infrastructure. Support highly available and resilient platforms using SRE principles, including HA, load balancing, resilience engineering, and continuous improvement. Participate in an on-call rotation and occasional out-of-hours support for critical global services. Must-Have Technical Skills: Microsoft Azure Microsoft Entra ID / Azure AD Conditional Access, MFA, PIM, RBAC, SSO, SCIM, and identity governance Windows Server 2016-2025 Linux - RHEL / Ubuntu Terraform and Bicep ARM templates PowerShell Azure Automation Runbooks and Hybrid Worker environments Azure governance, secure landing zones, and platform security Azure Monitor, Log Analytics, and Azure Managed Grafana Server and cloud security hardening Patch and lifecycle management, including legacy OS / virtual patching scenarios Hybrid cloud / on-premises infrastructure Experience Requirements: 5+ years of professional IT experience. 3+ years of hands-on cloud and infrastructure engineering experience, particularly with Microsoft Azure and hybrid environments. Proven experience supporting large and complex enterprise environments. Experience working across distributed/global teams. Experience with ITIL-aligned operations, including Incident, Problem, Change, Request Fulfilment, and Service Transition. Strong troubleshooting and root cause analysis capabilities. Ability to work independently in a remote environment and manage priorities with minimal supervision. Strong written and verbal English communication skills. Experience in financial services, insurance, or a similarly complex enterprise environment is preferred. Relevant Microsoft Azure certification(s) are required. Nice to Have: Azure networking: VNets, NSGs, firewalls, private endpoints, and routing. VMware / ESXi and Azure Local / HCI. Azure DevOps and GitHub Enterprise.CI/CD pipelines for infrastructure deployment. Jira and Confluence. Experience with cloud cost optimisation, forecasting, and consumption management. We offer*: Flexible working format - remote, office-based or flexible A competitive salary and good compensation package Personalized career growth Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more) Active tech communities with regular knowledge sharing Education reimbursement Memorable anniversary presents Corporate events and team buildings Other location-specific benefits *not applicable for freelancers