Lead Cloud Platform Engineer (Azure, Databricks & DevSecOps)

We are a rapidly-growing consumer intelligence platform that processes 50+ billion data points monthly to deliver actionable insights for global brands such as Coca-Cola, Bayer, and Unilever. We run on Azure, Databricks, and GenAI workflows, and we’re scaling our platform for faster delivery, stronger security, and tighter cost discipline.

Quick Facts

• Hands-on cloud platform leadership role with end-to-end ownership of Azure-based SaaS and AI infrastructure.
• Scope includes Azure administration, Entra ID and Microsoft 365, networking, storage, Kubernetes, security, CI/CD, FinOps, and the Azure Databricks platform layer.
• Clear path to technical or people leadership.

Description

You’ll own, secure, automate, and optimize Azure-based SaaS and AI infrastructure end to end.

What You’ll Do

• Own Azure subscriptions, governance, networking (VNets, private endpoints, DNS, NSGs), storage (ADLS Gen2, Blob), Azure SQL, Key Vault, and monitoring across all environments.
• Administer Entra ID and Microsoft 365: identities, MFA, Conditional Access, least-privilege access, and joiner/mover/leaver processes.
• Manage Azure Databricks infrastructure and security: secure connectivity, networking, identity integration, compute policies, audit logging, and cost controls.
• Build and improve CI/CD with Azure DevOps and GitHub Actions, and introduce Infrastructure as Code with Terraform, Bicep, or ARM to replace manual portal changes.
• Operate and secure Kubernetes/AKS environments and supporting application infrastructure.
• Strengthen security and DevSecOps posture; support SOC 2 evidence, security questionnaires, and enterprise reviews.
• Build monitoring, dashboards, runbooks, and incident response across the platform.
• Drive Azure and Databricks cost optimization through tagging, budgets, alerts, and compute tuning.

Required Qualifications

• 7+ years in DevOps, Cloud, Platform, Infrastructure, or Systems Engineering, including 4+ years hands-on with Azure in production.
• Strong Azure depth: subscriptions, RBAC, policies, networking, storage, monitoring, and security.
• Solid experience with Entra ID and Microsoft 365 administration.
• Production Kubernetes experience (AKS preferred).
• Experience managing or supporting Azure Databricks infrastructure, including workspace administration, compute, networking, secure storage access, identity, and audit logging.
• CI/CD experience with Azure DevOps and/or GitHub Actions, plus scripting with PowerShell, Azure CLI, Bash, or Python.
• Strong grasp of cloud security: least privilege, secrets management, encryption, and auditability.

Preferred Qualifications

• Experience in AI, data, analytics, or SaaS environments.
• Infrastructure as Code experience with Terraform or Bicep.
• Knowledge of SOC 2, ISO 27001, or GDPR.
• Experience with Microsoft Defender for Cloud and DevSecOps tooling.
• FinOps and Databricks cost-optimization experience.
• Experience working with distributed or offshore teams.

This role is not a pure CI/CD role, a helpdesk-only M365 administration role, a Databricks notebook developer role, a data engineering role, or a people-management role.

The Opportunity

• Long-term opportunity with high visibility and high impact.
• Ownership with a clear path to technical or people leadership.