Azure Platform Engineer

Senior Azure Platform Engineer

3 month contract

£600 - £650 per day OUTSIDE IR35

Remote

Role Overview
We are looking for a Senior Azure Platform Engineer to design, build and operate a shared Azure integration platform within a complex hybrid enterprise environment.

You will own the platform engineering layer, including Azure Landing Zones, networking, API Management, shared PaaS services, Infrastructure as Code, CI/CD, security, observability and disaster recovery.

The platform must be secure, repeatable and automated, with the ability to deploy consistently across multiple environments, regions and platform instances.

Key Responsibilities

• Design and implement Azure Landing Zones and hub-and-spoke networking.
• Build secure connectivity using VNets, peering, UDRs, NSGs, Private Link, Private DNS, WAF and controlled egress.
• Deploy and operate Azure API Management, including policies, products, versioning, certificates and self-hosted gateways.
• Implement Application Gateway, Azure Front Door and shared PaaS services including Logic Apps, Functions, Key Vault and monitoring.
• Own the Terraform / Infrastructure as Code estate, including reusable modules, state management, versioning and drift detection.
• Build Azure DevOps pipelines with approvals, security gates and workload identity federation.
• Implement Everything as Code across infrastructure, policy, APIM configuration, monitoring and DNS.
• Establish platform observability using Azure Monitor, Log Analytics and Application Insights.
• Integrate platform telemetry with Microsoft Sentinel and implement Azure Policy and Defender for Cloud controls.
• Design and test high availability, disaster recovery, resilience and regional failover.
• Implement certificate, secrets and identity lifecycle management.
• Establish platform capacity, cost management and operational standards.
• Create reusable workload onboarding templates and golden paths.
• Develop automated testing across infrastructure, networking, security and platform configuration.
• Maintain operational runbooks, architecture documentation and platform standards

Essential Experience

• 5+ years' Azure infrastructure experience, ideally including 2+ years in platform engineering or landing zones.
• Expert Terraform experience on Azure, including reusable modules and multi-environment deployments.
• Strong Azure networking knowledge: hub-and-spoke, VPN/ExpressRoute, NVAs, UDRs, NSGs, WAF, Private Link and DNS.
• Strong Azure API Management experience, including self-hosted gateways.
• Experience with Application Gateway and Azure Front Door.
• Strong Azure DevOps and CI/CD experience.
• Experience with Azure Integration Services, including Logic Apps and Functions.
• Strong knowledge of Azure security, Entra ID, RBAC, managed identities, Key Vault and Azure Policy.
• Experience with Azure Monitor, Log Analytics, Application Insights and Microsoft Sentinel.
• Experience implementing high availability, disaster recovery and resilience testing.
• Understanding of software supply-chain security, automated testing and secure CI/CD.
• Strong Infrastructure as Code and Everything as Code mindset.
• Ability to work with architecture, network, security and integration teams and translate architectural decisions into production-ready platforms.

Desirable

• Experience with hybrid/on-premises enterprise environments.
• Experience working with enterprise network teams and NVAs.
• Logic Apps Standard and VNet-integrated hosting.
• Experience integrating with legacy systems or ERP platforms.
• Experience operating shared Azure platforms across multiple regions.
• Experience creating reusable platform modules and golden-path templates.
• Experience with cloud cost optimisation and capacity planning