Azure Platform Engineer

Senior Azure Platform Engineer

3 month contract

£600 - £650 per day OUTSIDE IR35

Remote

Role Overview We are looking for a Senior Azure Platform Engineer to design, build and operate a shared Azure integration platform within a complex hybrid enterprise environment.

You will own the platform engineering layer, including Azure Landing Zones, networking, API Management, shared PaaS services, Infrastructure as Code, CI/CD, security, observability and disaster recovery.

The platform must be secure, repeatable and automated, with the ability to deploy consistently across multiple environments, regions and platform instances.

Key Responsibilities

Design and implement Azure Landing Zones and hub-and-spoke networking.

Build secure connectivity using VNets, peering, UDRs, NSGs, Private Link, Private DNS, WAF and controlled egress.

Deploy and operate Azure API Management, including policies, products, versioning, certificates and self-hosted gateways.

Implement Application Gateway, Azure Front Door and shared PaaS services including Logic Apps, Functions, Key Vault and monitoring.

Own the Terraform / Infrastructure as Code estate, including reusable modules, state management, versioning and drift detection.

Build Azure DevOps pipelines with approvals, security gates and workload identity federation.

Implement Everything as Code across infrastructure, policy, APIM configuration, monitoring and DNS.

Establish platform observability using Azure Monitor, Log Analytics and Application Insights.

Integrate platform telemetry with Microsoft Sentinel and implement Azure Policy and Defender for Cloud controls.

Design and test high availability, disaster recovery, resilience and regional failover.

Implement certificate, secrets and identity lifecycle management.

Establish platform capacity, cost management and operational standards.

Create reusable workload onboarding templates and golden paths.

Develop automated testing across infrastructure, networking, security and platform configuration.

Maintain operational runbooks, architecture documentation and platform standards

Essential Experience

5+ years' Azure infrastructure experience, ideally including 2+ years in platform engineering or landing zones.

Expert Terraform experience on Azure, including reusable modules and multi-environment deployments.

Strong Azure networking knowledge: hub-and-spoke, VPN/ExpressRoute, NVAs, UDRs, NSGs, WAF, Private Link and DNS.

Strong Azure API Management experience, including self-hosted gateways.

Experience with Application Gateway and Azure Front Door.

Strong Azure DevOps and CI/CD experience.

Experience with Azure Integration Services, including Logic Apps and Functions.

Strong knowledge of Azure security, Entra ID, RBAC, managed identities, Key Vault and Azure Policy.

Experience with Azure Monitor, Log Analytics, Application Insights and Microsoft Sentinel.

Experience implementing high availability, disaster recovery and resilience testing.

Understanding of software supply-chain security, automated testing and secure CI/CD.

Strong Infrastructure as Code and Everything as Code mindset.

Ability to work with architecture, network, security and integration teams and translate architectural decisions into production-ready platforms.

Desirable

Experience with hybrid/on-premises enterprise environments.

Experience working with enterprise network teams and NVAs.

Logic Apps Standard and VNet-integrated hosting.

Experience integrating with legacy systems or ERP platforms.

Experience operating shared Azure platforms across multiple regions.

Experience creating reusable platform modules and golden-path templates.

Experience with cloud cost optimisation and capacity planning