Senior Azure Platform Engineer

Job description

Anticipated Contract End Date/Length: TBD Work Set-Up: Hybrid (3 days per week in office) Our client in the Information Technology and Services industry is looking for a Senior Azure Platform Engineer to provide hands-on technical leadership across its Azure platform. The role will own the Azure platform underpinning a large web estate and set the technical standard for how it is engineered, operated, secured, and evolved. The successful candidate will maintain current and compliant VM images, implement Azure Policy and governance controls, and drive Infrastructure as Code and PowerShell automation as the default way of working. The role requires a deep Azure specialist who can design and implement changes directly, lead complex technical investigations, and provide strong technical direction across platform engineering, application, and cybersecurity teams. What you will do: Operate and maintain the VM image build and release process, keeping golden images current through hardening, patching, mandated controls, testing, and controlled rollout. Implement and respond to Azure Policy and governance controls by designing compliant infrastructure, assessing impact, and remediating drift and non-compliance. Build and maintain Infrastructure as Code and CI/CD pipelines, replacing manual changes with repeatable, reviewed, and automated processes. Develop reusable PowerShell modules and tooling for provisioning, configuration, and operational tasks, incorporating error handling, testing, and production-ready automation. Configure and troubleshoot core Azure networking, including VNets, NSGs, private endpoints, DNS, load balancing, traffic routing, and hybrid connectivity. Lead technical investigations into complex platform issues across infrastructure, network, and application layers using logs, monitoring, and diagnostic tooling. Produce clear technical documentation and explain Azure platform behaviour to engineers and business stakeholders. Provide technical authority and guidance on Azure engineering practices across the platform team. Mentor less experienced engineers and raise engineering capability through reviews, guidance, and practical example. Collaborate with platform engineers, application pods, and cybersecurity teams to deliver secure and effective Azure solutions. Drive the continuous evolution of the Azure platform through well-founded technical recommendations and engineering standards. Bring deep, current hands-on experience engineering Azure platforms in production at scale across compute, storage, networking, identity, and governance. Possess strong knowledge of ARM, Azure resource lifecycle, RBAC, managed identities, and the Azure Policy engine. Apply expert-level PowerShell skills to production automation, reusable modules, error handling, testing, and operational tooling. Possess strong expertise in Azure networking, including VNets, NSGs, private endpoints, DNS, routing, load balancing, and hybrid connectivity. Have hands-on experience with VM image build and release processes using technologies such as Azure Image Builder, Packer, or Shared Image Galleries. Bring production experience with Infrastructure as Code using Bicep, Terraform, ARM, or equivalent major tooling, including module design, state and pipeline management, and code review. Have experience implementing and responding to governance at scale, including interpreting policies and controls, assessing estate-wide impact, and driving compliant remediation. Bring a proven track record of diagnosing and resolving complex production issues across infrastructure, network, and application layers. Possess the ability to produce clear technical documentation and communicate complex platform behaviour to technical and business stakeholders. Have experience mentoring and supporting less experienced engineers. Bring experience with Azure landing zones or enterprise-scale architecture, including management groups, subscription design, and hub-and-spoke models. Have experience authoring and implementing Azure Policy and managing remediation at scale. Have experience with Azure DevOps or GitHub Actions pipelines. Possess experience with Entra ID, RBAC, and managed identities. Have experience operating within security and operational risk controls in regulated environments. Hold relevant Azure certifications such as AZ-104, AZ-305, or AZ-400. Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship. HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements. We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted. HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law. Who is HelloKindred? HelloKindred are specialists in staffing marketing, creative and technology roles, offering a range of talent solutions that can be delivered on-site, remotely or hybrid. Our vision is to make work accessible and people’s lives better. We do this by disrupting traditional employment barriers – connecting ambitious talent to flexible opportunities with trusted brands.