Azure Cloud engineer

We are looking for an Azure Cloud Engineer to help design, build, automate, and operate an enterprise Azure platform. The role focuses on delivering secure, scalable, and governed Azure capabilities across Landing Zones, networking, identity, policy, observability, reliability, and cost management. Working closely with Architecture, Security, Product, and Operations teams, you will contribute to platform improvements, operational excellence, and cloud enablement across the organization. Project Overview: Our client is a large global enterprise operating across multiple markets, with a complex technology landscape and a strong focus on digital transformation and innovation. The organization is actively investing in modern cloud, data, and AI capabilities to enable scalable, secure, and highly automated solutions across its business. Requirements: - 5+ years of experience in Cloud Infrastructure, Platform Engineering, DevOps, or SRE, including 3+ years of hands-on Azure experience. - Experience operating enterprise Azure environments and Landing Zone components. Practical knowledge of: - Azure Management Groups - Azure Policy - Microsoft Entra ID - RBAC and PIM - Azure Monitor - Log Analytics - Cost governance and optimization Experience with Azure networking: - VNets - Routing - DNS - NSGs - Private Endpoints - Firewalls - ExpressRoute or VPN connectivity Production experience with: - Infrastructure as Code - Git-based delivery - CI/CD - Python or PowerShell scripting - Strong troubleshooting and root-cause analysis skills. - Strong communication, collaboration, and ownership mindset. Nice to Have - Microsoft certifications such as: Azure Administrator Associate, Azure Network Engineer Associate, DevOps Engineer Expert, Azure Security Engineer Associate - Experience with Terraform, Azure DevOps, or GitHub Actions. - Exposure to multi-cloud environments. - SRE practices. - FinOps. - Platform-as-a-product operating models. Responsibilities: Platform Engineering & Delivery - Implement Azure platform capabilities, reusable patterns, and roadmap initiatives. - Contribute to technical design discussions and peer reviews. - Document technical decisions, risks, and trade-offs. - Own deliverables from refinement through implementation, testing, documentation, and operational handover. Landing Zones, Governance & Security - Build and maintain Azure Landing Zone components including management groups, subscriptions, identity services, policies, and workload guardrails. - Implement and support Azure Policy, RBAC, privileged access controls, tagging, compliance monitoring, and security-by-design practices. - Remediate security and compliance findings and maintain technical evidence required for governance processes. Automation & Platform Engineering - Develop and maintain Infrastructure as Code modules and automated lifecycle workflows. - Build self-service subscription and platform capabilities. - Reduce manual effort through automation and eliminate configuration drift. - Support Git-based delivery processes and CI/CD pipelines. Reliability, Operations & Optimization - Implement observability, backup, recovery, and operational readiness controls. - Troubleshoot incidents and perform root-cause analysis. - Improve platform resilience, performance, and cost efficiency using monitoring, capacity management, and FinOps practices. Collaboration & Service Ownership - Collaborate with technical leads, product owners, and partner teams. - Refine requirements, estimate work, and manage dependencies. - Maintain documentation, operational records, and backlog updates. - Participate in operational support and continuous service improvement activities.