Azure Platform Engineer

Pay Range: $DOE/hr. The pay rate may differ depending on your skills, education, experience, and other qualifications.
Featured Benefits: Medical Insurance in compliance with the ACA. 401(k). Sick leave in compliance with applicable state, federal, and local laws.
Job Description:

• Lead Azure Platform Engineering & Landing Zone Design: Architect and build Azure cloud foundations from the ground up, including tenant design, management group hierarchy, subscription vending/factory, governance, and enterprise-scale landing zones aligned with Microsoft Cloud Adoption Framework (CAF).
• Infrastructure as Code & Terraform Expertise: Extend an existing HCP Terraform platform by designing and developing reusable Azure infrastructure modules, workspaces, and deployment patterns using Terraform, with strong emphasis on automation, standardization, and self-service consumption.
• Azure Governance & Security: Implement and manage Azure Policy, RBAC, Entra ID, managed identities, custom roles, least-privilege access controls, and enterprise security guardrails across multiple subscriptions and environments.
• Enterprise Networking: Design and support scalable Azure networking solutions including hub-and-spoke architectures, ExpressRoute, Azure Firewall, Private Endpoints, Private DNS, and Azure Virtual Network Manager.
• Platform Services Architecture: Build and operationalize cloud platforms supporting services such as AKS, Container Apps, App Services, Azure Functions, Azure SQL, PostgreSQL Flexible Server, Storage Accounts, Key Vault, and customer-managed encryption keys.
• Observability & Cloud Operations: Establish monitoring, logging, and operational excellence practices using Azure Monitor, Log Analytics, and cloud-native observability frameworks integrated into platform offerings by default.
• Platform Product Mindset: Design infrastructure products and reusable services that enable DevOps teams to provision and manage environments independently, with focus on API/interface design, module versioning, backward compatibility, CI/CD pipelines, and long-term maintainability.
• FinOps & Cost Governance: Define and implement enterprise-scale cost management practices including tagging standards, chargeback/showback models, subscription budgets, Azure Cost Management, reservations, savings plans, and cost visibility across hundreds of subscriptions.

 Preferred Qualifications:

• Experience with Azure Verified Modules (AVM), Defender for Cloud, HCP Terraform Enterprise, GitLab-based CI/CD, policy-as-code (Sentinel), and large-scale multi-subscription Azure environments.