Platform Engineer

Quick Facts

• Role: Platform Engineer (Platform Team)

Description

The Platform Engineer enables development, deployment, and operation of applications across the organization by designing, building, and maintaining shared platform foundations including pipelines, infrastructure, and tooling. You will own and evolve a shared Azure DevOps pipeline template library used by all application teams, manage Azure Kubernetes Service (AKS) clusters (including confidential compute), and automate infrastructure provisioning using Infrastructure as Code.

Responsibilities

Platform Engineering & Infrastructure

• Design, build, and maintain Azure Kubernetes Service (AKS) clusters (private and public): node pool configuration, networking, ingress, autoscaling, and confidential compute workloads.
• Manage and evolve the Azure cloud platform: subscriptions, resource groups, Key Vault, Azure Container Registry, Service Bus, Storage Accounts, and SQL databases.
• Operate and support OpenShift environments where applicable.
• Ensure platform security, reliability, and compliance with organizational standards (network policies, managed identities, TLS, RBAC).

CI/CD Pipeline Development & Maintenance

• Develop and maintain shared, reusable CI/CD pipeline templates (YAML) in Azure DevOps consumed by all application repositories.
• Build and optimize multi-stage deployment pipelines for .NET 8: container image builds (Docker/ACR), database deployments (DACPAC/sqlpackage), and Service Bus provisioning.
• Author and maintain PowerShell Core 7+ modules and scripts for pipeline logic (configuration generation, deployment map parsing, secret retrieval, Terraform variable construction, Helm-based deployments).
• Ensure pipelines enforce security, quality gates (SonarQube), and environment promotion controls (DEV → TST → VAL → Manual Gate → PRD).
• Standardize deployment patterns so all project teams follow consistent, auditable release workflows.

Infrastructure as Code (IaC)

• Design, author, and maintain Terraform modules for provisioning and configuring Azure resources: AKS workloads (Helm provider), Keycloak identity clients, SQL users, managed identities, Key Vault HSM keys, and Service Bus RBAC.
• Automate provisioning, scaling, and lifecycle management using Terraform, Azure CLI, and PowerShell.
• Manage Terraform state with Azure Storage backend using AAD auth and ensure safe, repeatable deployments across environments.

Repository & Azure DevOps Administration

• Administer the shared Common/devops repository and related deployment configuration repositories.
• Support version control practices and branching strategy (GitFlow: DEV/MAIN/hotfix) and PR validation workflows.
• Manage Azure DevOps service connections, agent pools, variable groups, and environment approvals.

Collaboration & Enablement

• Bridge infrastructure and application development teams; help integrate platform capabilities into workflows.
• Provide guidance on platform standards, deployment map configuration, pipeline extension patterns, and troubleshooting.
• Write and maintain documentation (README, schema references, onboarding guides) for consuming teams.
• Review contributions to shared platform code for architectural consistency and backward compatibility.

Requirements

• Hands-on experience operating and configuring Azure Kubernetes Service — networking, ingress, node pools, autoscaling, confidential compute, Helm chart deployments.
• Strong understanding of CI/CD principles, GitFlow branching, environment promotion, and deployment automation.
• Familiarity with .NET 10 build toolchain (dotnet build), NuGet, solution/project structure, and containerizing .NET applications.
• Proficiency in PowerShell Core 7+ — writing modules (.psm1), classes, Pester 5+ tests, and robust scripting with proper error handling.
• Broad experience with Azure services: Key Vault, Container Registry, Service Bus, Storage Accounts, SQL Database, Managed Identities, RBAC.
• Understanding of cloud architecture principles — scalability, high availability, security, cost management.
• Experience with Azure DevOps (TFS) — YAML pipelines, extends templates, repositories, service connections, agent pools, artifacts.
• Ability to author and maintain multi-stage YAML pipeline templates with parameterization, conditions, and template composition.
• Experience writing and maintaining Terraform configurations — modules, providers (azurerm, helm, keycloak, mssql, kubernetes), state management, plan/apply workflows.
• Understanding of network concepts relevant to AKS and Azure — VNets, NSGs, private endpoints, DNS, ingress controllers, proxy configuration.
• Ability to reason about system architecture — separation of concerns, shared platform design, module boundaries, and extensibility.

Benefits

Not provided in the supplied text.