Cloud Platform Engineer

Our client is a high-growth, investment partner-backed technology business continuing to scale rapidly. As part of this growth, the technology function is investing in dedicated cloud platform engineering capability to support a secure, scalable, and well-governed Azure and Microsoft 365 estate. The Cloud Platform Engineer is a newly created role reporting to the Security & Infrastructure Director. The role is responsible for building, operating, and automating the Azure and Microsoft 365 platform, ensuring infrastructure is reliable, secure, and aligned to policies and controls defined by the security function.

The role works closely across infrastructure, security, and delivery teams to implement governance standards, automate administration, support change activity, and provide a dependable cloud foundation for business growth and ongoing service improvement.

Responsibilities

• Build, operate, and continuously improve Azure and Microsoft 365 services to support a secure, reliable, and scalable platform.
• Develop, maintain, and enhance Terraform infrastructure for repeatable, controlled platform deployment and configuration.
• Implement and maintain Azure Policy and governance standards to enforce compliance, consistency, and operational control.
• Implement and support Microsoft Entra ID configurations, including role‑based access control, identity governance, and Conditional Access policies.
• Implement and support Microsoft Agent365 as the control plane for AI agents, including agent registration, access control, observability, lifecycle governance, and integration with Microsoft Entra, Defender, Purview, and Intune controls.
• Build and maintain CI/CD pipelines in Azure DevOps to support infrastructure deployment, release management, and platform change activity.
• Automate platform administration tasks to reduce manual effort, improve consistency, and increase operational efficiency.
• Provide platform engineering support to development, architecture, and delivery teams to enable secure and effective service rollout.
• Support platform incident resolution and contribute to structured change management across the Azure and Microsoft 365 estate.
• Implement security controls and configuration standards defined by the Senior Security Manager and wider security function.
• Maintain governance guardrails, monitoring, and reporting to support policy compliance and operational assurance.
• Manage SharePoint governance, including permissions, content governance, and reduction of sprawl.
• Maintain Terraform configurations with version control, peer review, and automated deployment via Azure DevOps pipelines.
• Apply configuration automation to reduce manual administrative processes.
• Support day-to-day platform operations, service stability, and issue resolution across Azure and Microsoft 365 services.
• Work collaboratively with internal teams and third parties to deliver changes, resolve issues, and improve platform service outcomes.

Interfaces and Boundaries

• Infrastructure Manager: retains ownership of end user technology, device management, and day to day operational priorities, and directs the Cloud Platform Engineer's work across platform administration, Terraform, and Azure DevOps delivery.
• Data Platform Engineer: owns CI/CD pipelines and infrastructure deployment for data platform and analytics workloads; the Cloud Platform Engineer provides the underlying platform, networking, and identity foundations these workloads run on, but does not own their pipeline or deployment configuration.
• MSP: owns network, connectivity, and baseline operations; the Cloud Platform Engineer acts as operational liaison but does not own the underlying service.

Skills and Experience

• Experience building and operating Azure and Microsoft 365 services in a production environment.
• Strong hands‑on Terraform experience, including maintaining reusable infrastructure code and supporting controlled deployments.
• Experience building and maintaining Azure DevOps pipelines for infrastructure and platform delivery.
• Good knowledge of Microsoft Entra ID, identity and access management, role‑based access control, and Conditional Access.
• Experience implementing Azure Policy and governance controls within an enterprise environment.
• Experience automating administrative tasks and improving operational efficiency across cloud platforms.
• Strong communication and stakeholder engagement skills, with the ability to work effectively across infrastructure, security, and delivery teams.
• Experience supporting or rolling out Microsoft Copilot or other AI productivity tooling.
• Experience with other infrastructure tooling (Bicep, ARM templates).
• Experience with Microsoft Purview, particularly information protection, data loss prevention, and compliance governance.
• Relevant certifications such as Microsoft Certified: Azure Administrator Associate, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Information Security Administrator Associate, or Terraform Associate.
• Experience in private equity backed environment.