Azure Platform Engineer
Hybrid working (2 days per week required in the London office).
My client are looking for an Azure Platform Engineer to strengthen, standardise and modernise their core Microsoft Azure environment.
Working closely with Development, Applications and Security teams, the role will focus on foundational cloud setup, serverless components, core PaaS databases, platform health, security alignment and practical self-service infrastructure blueprints. It would suit someone with a strong understanding of development and coding.
Responsibilities:
- Design, configure and maintain Azure serverless components, including Azure Functions, Function Apps, App Service Plans, scaling models, host processes and environment lifecycles.
- Oversee Azure SQL Databases and Managed Instances, including availability, firewalls, private endpoints, Entra ID integration, performance monitoring, backups and recovery readiness.
- Manage certificates and secrets across Azure workloads using Azure Key Vault, App Service certificates and SSL/TLS automation, including rotation, renewal and lifecycle controls.
- Identify, analyse and resolve Azure infrastructure vulnerabilities, deployment issues and configuration risks in close coordination with the Security team.
- Provision and maintain cloud resources using infrastructure as code, such as Terraform, Bicep or ARM templates, with structured Resource Groups aligned to Microsoft Cloud Adoption Framework governance.
- Establish curated Azure Deployment Environments and self-service infrastructure blueprints for Development, Applications and wider IT teams.
Required Skills / Experience:
- Strong hands-on experience with Microsoft Azure serverless and PaaS services, including Azure Functions, Function Apps, App Service Plans and related hosting models.
- Experience administering Azure SQL Database and/or Managed Instance, including access controls, private connectivity, resource tiering, backup/recovery and performance optimisation.
- Strong experience with infrastructure as code, including Terraform, Bicep or ARM templates, to deploy modular and repeatable cloud resources.
- Experience managing certificates, TLS/SSL, domain bindings, secrets and secret rotation using Azure Key Vault and automated renewal workflows.
- Practical knowledge of Azure governance, networking, Resource Group boundary design, Microsoft Entra ID, RBAC and information security best practice.
- Practical coding and scripting capability using PowerShell, Python, Azure CLI or equivalent command-line tooling to support operational automation.
Desirable Certifications:
- AZ-104: Microsoft Certified Azure Administrator Associate.
- AZ-305: Designing Microsoft Azure Infrastructure Solutions.
- AZ-400: Microsoft Certified DevOps Engineer Expert.
- AZ-500: -Microsoft Azure Security Certification
Azure Platform Engineer