AI Platform Engineer

AI Platform

We are currently recruiting for an AI Platform Engineer with Azure experience to join one of our Insurance clients on a 6-month contract.

Inside IR35

Remote

Key responsibilities

• Design, provision and maintain the Azure landing zone for the agentic platform, including Azure AI Foundry projects, model deployments, Azure AI Search, Azure Cosmos DB, Azure Data Lake and supporting App Service/Container Apps/Functions estate.
• Own all infrastructure as code (Bicep and/or Terraform), with environment promotion across dev, test and production and no manual portal changes in controlled environments.
• Implement the platform identity and secrets model: Entra managed identities for every workload, RBAC least-privilege role assignments, Key Vault integration, and elimination of long-lived credentials and connection strings.
• Secure the network perimeter using private endpoints, VNet integration, private DNS and egress controls for AI Foundry, Cosmos DB, AI Search and storage.
• Provision and configure the responsible-AI services - Azure AI Content Safety and Azure AI Anomaly Detector - and expose them as reusable platform capabilities with agreed policies, thresholds and alerting.
• Build and maintain CI/CD pipelines in GitHub Actions (or Azure DevOps), covering build, test, security scanning, infrastructure deployment, prompt/agent configuration release and rollback.
• Establish end-to-end observability: Application Insights and Log Analytics workspaces, distributed tracing across the orchestration and API layers, token and cost telemetry, dashboards, SLOs and actionable alerting.
• Manage model capacity, quota, region strategy, resilience and failover; forecast and control consumption cost through tagging, budgets and rightsizing.
• Act as the engineering authority on platform standards - reference architectures, guardrails, policy-as-code (Azure Policy), naming and tagging conventions - and support developer onboarding and self-service.

Essential skills and experience

• Strong hands-on Microsoft Azure engineering experience across compute, networking, identity, storage and data services.
• Demonstrable infrastructure-as-code delivery using Bicep, ARM and/or Terraform in a multi-environment setting.
• Practical experience of Microsoft Entra ID: managed identities, service principals, app registrations, RBAC and least-privilege design.
• CI/CD pipeline engineering with GitHub Actions or Azure DevOps, including automated deployment of infrastructure and application artefacts.
• Scripting and automation in PowerShell, Bash and/or Python.
• Azure networking for PaaS security: private endpoints, VNet integration, private DNS zones, service Firewalls.
• Observability engineering with Azure Monitor, Application Insights, Log Analytics and KQL.
• Containerisation experience (Docker, plus Azure Container Apps or AKS).
• Experience provisioning or operating Azure AI Foundry, Azure OpenAI or Azure AI Search in production.
• Familiarity with LLM operational concerns: token throughput, provisioned throughput units, rate limiting, prompt/version release management.
• Azure Policy and policy-as-code, or a compliance framework background (for example ISO 27001, SOC 2, NIST).
• Microsoft Fabric, Synapse or Power BI experience for platform reporting.
• Azure certifications such as AZ-104, AZ-305, AZ-400 or AI-102.

Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.