Azure Platform Engineer

Project Overview

• This team sits within Client centralized Platform Engineering group and is responsible for building an internal Azure platform used by application teams across the bank.
• Originally Azure-focused, now expanding to multi-cloud (Azure + GCP).
• Platform is moving toward enterprise-wide rollout (GA).
• Current focus is on platform hardening, standardization, and scaling across multiple teams.
• This is a build + own platform environment - not a support function.

What the Role Involves (Day-to-Day)

• Building and maintaining Terraform-based infrastructure.
• Supporting AKS (Kubernetes) and application hosting patterns.
• Enabling secure and compliant deployments.
• Identifying and remediating configuration drift and security gaps.
• Partnering with application teams on platform usage and automation.

Key Skills Required

• Terraform (Most Important): strong in state management, drift detection and resolution, multi-environment / multi-subscription design, real-world scenarios (failover, imports, conflicts).
• Azure Platform Engineering: hands-on experience with AKS (Kubernetes), App Services / Functions, networking fundamentals (VNETs, private endpoints).
• Security & Identity: managed identity (system vs user), RBAC (control vs data plane), secure service-to-service communication, Key Vault usage.
• Azure Policy / Governance: hands-on implementation experience, policy enforcement (deny, audit, etc.), experience working across management groups/subscriptions.
• Observability / Production Support: logging (Log Analytics, container logs), monitoring and alerting, AKS troubleshooting, handling production incidents.
• Development: strong Python preferred, experience building APIs or automation tools, Java is a plus, Golang is a big plus.

Ideal Candidate Profile

• Hands-on platform engineer, not pure architects or pipeline-only DevOps engineers.
• Have built and supported platforms.
• Comfortable troubleshooting real-world issues.
• Clearly explain their hands-on contributions.

Quick Screening Questions

• What happens to Terraform state after a failover?
• How do you handle infrastructure drift?
• How have you implemented Azure Policy in your environment?
• When would you use system vs user-assigned managed identity?
• How do you troubleshoot a failing pod in AKS?