Azure Cloud Engineer, Data Mesh and AI Platforms team

Welcome to Group Technology, where we engineer solutions that support Nordea's transformation and enable the Customer Vision and Business Strategy. As part of Nordea's 2030 strategic direction, we are modernizing our technology and data estate while accelerating the adoption of AI-enabled capabilities across the bank.

We are looking for experienced Azure Cloud Engineers to join our Data Mesh and AI Platforms team. You will help deliver secure, automated, and reusable Azure infrastructure and platform capabilities in close collaboration with engineers, architects, product owners, and governance stakeholders.

This is a hands-on engineering role. You will design, build, test, and improve Azure platform patterns, automation, and operational controls that enable internal teams to provision and operate modern data and AI solutions safely in a regulated banking environment.

About our team

The Data Mesh and AI Platforms team is building the next generation of cloud-native data and AI platform capabilities, with a strong focus on secure infrastructure, automated provisioning, identity integration, reusable engineering patterns, and strong operational controls. You will work closely with product owners, engineers, architects, cybersecurity, data governance, and cloud platform teams.

The role requires strong practical engineering skills, a delivery mindset, and the ability to turn platform architecture and agreed standards into high-quality, reusable implementation.

This is a full-time permanent position with a hybrid working arrangement—up to 40% remote work is possible, but full remote work is not allowed. We expect to hire in Gdańsk or Gdynia, Poland; Copenhagen, Denmark; or Helsinki, Finland.

Main responsibilities

• Build, configure, and improve Azure infrastructure foundations using Terraform and automated delivery pipelines.
• Implement reusable infrastructure-as-code modules for subscriptions, resource groups, networking, Azure RBAC, managed identities, secrets, logging, monitoring, and policy guardrails.
• Support secure Azure landing-zone patterns, including management-group and subscription structure, hub-and-spoke networking, virtual networks, private endpoints, Azure Firewall, network security groups, and environment isolation.
• Create and maintain CI/CD pipelines for provisioning, validation, testing, deployment, and lifecycle management of platform components.
• Implement identity and access patterns using Microsoft Entra ID, federation, managed identities, least-privilege Azure RBAC, privileged access controls, and secure access workflows.
• Support Azure data and AI platform enablement, including platform patterns for Azure AI Foundry, Azure Machine Learning, Microsoft Fabric, Azure Data Factory, Event Hubs, Azure Storage, Azure Functions, and AKS.
• Build observability and operational controls using Azure Monitor, Log Analytics, Application Insights, alerting, dashboards, runbooks, and production-readiness checks.
• Translate platform priorities and agreed engineering standards into well-structured backlog items, engineering tasks, implementation plans, and technical documentation.
• Collaborate with cybersecurity, governance, and architecture teams to ensure platform capabilities meet security, compliance, and operational expectations.
• Contribute to code reviews, pattern reviews, testing practices, and continuous improvement of the Azure platform engineering experience.

Key skills required for this role

• Azure infrastructure: Hands-on experience with Azure subscriptions, resource groups, virtual networks, hub-and-spoke networking, private endpoints, Azure Firewall, network security groups, and environment separation.
• Terraform and IaC: Strong Terraform skills, including module usage, reusable patterns, state handling, variables, outputs, validation, and promotion across environments.
• Identity and security: Practical knowledge of Microsoft Entra ID, Azure RBAC, least privilege, managed identities, federation, Key Vault, key management, and secure access patterns.
• CI/CD and automation: Experience building or operating Azure DevOps or equivalent pipelines for infrastructure provisioning, validation, deployment, policy checks, and release management.
• Data and AI platform services: Working knowledge of services such as Azure AI Foundry, Azure Machine Learning, Microsoft Fabric, Azure Data Factory, Event Hubs, Azure Storage, Azure Functions, or AKS.
• Observability and operations: Experience with Azure Monitor, Log Analytics, Application Insights, alerting, dashboards, runbooks, incident response, and production-readiness practices.
• Engineering collaboration: Ability to work in a team, write clear documentation, participate in reviews, and communicate technical decisions clearly.

Who you are

• Hands-on: You enjoy building infrastructure, automation, and platform capabilities that are robust, reusable, and easy for others to consume.
• Security-focused: You understand that identity, access, network boundaries, auditability, and operational controls are core parts of platform delivery.
• Delivery-focused: You can take agreed priorities and engineering standards, break them into concrete tasks, and deliver working outcomes with quality and discipline.
• Curious about AI platforms: You want to help make data and AI capabilities available in a controlled, scalable, and developer-friendly way.
• Collaborative: You communicate clearly, ask good questions, and work constructively with engineers, architects, and governance stakeholders.

Education and experience

• BSc or MSc in Computer Science, Engineering, Information Security, Data Engineering, or a related discipline, or equivalent practical experience.
• Several years of experience in cloud engineering, infrastructure engineering, platform engineering, DevOps, or similar roles.

Required qualifications

• Practical experience building or operating production-grade infrastructure on Azure.
• Strong Terraform and automation experience, with an understanding of reusable module design and infrastructure lifecycle management.
• Solid understanding of Azure networking, Microsoft Entra ID, Azure RBAC, security controls, secrets management, Azure Policy, and operational monitoring.
• Experience with CI/CD tools and modern software engineering practices such as code review, version control, testing, and documentation.
• Interest in Azure data and AI services, especially Azure AI Foundry, Azure Machine Learning, Microsoft Fabric, and related platform capabilities.
• Ability to work in a regulated enterprise environment where compliance, resilience, and auditability matter.

Next steps

Submit your application no later than 30/09/2026.