Azure Lead Engineer

Quick Facts

• Role: Azure Lead Engineer
• Scope: Hands-on technical leadership for an enterprise Azure platform (landing zones, governance, security, networking, automation, reliability, and cost)

Description

You will own the Azure technical roadmap, reference architectures, and reusable implementation patterns for a secure, scalable, and governed enterprise platform. You’ll lead architecture reviews, mentor engineers, and drive platform automation using Infrastructure as Code and CI/CD. You’ll also establish operational standards, lead troubleshooting and root-cause analysis, and optimize resilience, performance, and cost.

Responsibilities

• Own the Azure technical roadmap, standards, and implementation patterns
• Lead architecture and design reviews and communicate trade-offs
• Mentor engineers and strengthen peer review
• Design and operate enterprise Azure Landing Zones (management groups, subscriptions, identity, policy, shared services, guardrails)
• Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring, and security-by-design
• Partner with Security and Compliance to remediate risks and maintain audit-ready evidence
• Drive Infrastructure as Code and automated lifecycle management using Git and CI/CD
• Build self-service subscription and platform capabilities with clear product interfaces and documentation
• Control configuration drift and reduce manual operational work
• Establish observability, operational readiness, backup/recovery, and incident-management standards
• Lead complex troubleshooting, root-cause analysis, and engineering improvements from incidents/problems
• Optimize resilience, performance, and cost using capacity management and FinOps
• Translate strategy into a prioritized backlog; manage dependencies, risks, owners, and escalation paths
• Coordinate delivery across squads while maintaining architecture, security, and engineering quality
• Represent Azure decisions and explain recommendations to engineering and business audiences

Requirements

• 5+ years in cloud infrastructure, platform engineering, DevOps, or SRE
• At least 3 years hands-on Azure experience
• Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones
• Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics, and cost controls
• Strong Azure networking experience: hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls, and ExpressRoute/VPN
• Production experience with IaC, Git-based delivery, CI/CD, and scripting (Python or PowerShell)
• Demonstrated technical leadership, mentoring, stakeholder influence, and delivery in a global enterprise environment

Benefits

• Flexible work schedule
• Fixed financial bonus issued upfront on a quarterly basis (private medical care and sport card; B2B contract)
• Birthday, wedding, and child-birth recognition
• E-learning accounts (Coursera, O’Reilly, Udemy)
• Corporate language school