Builds and runs the platform underneath the data work: landing zone, identity, capacities, connectivity, CI/CD and monitoring. Writes the runbooks the Central Hudson platform team takes over.
Responsibilities
• Configure tenant settings, Entra groups, the service principal, workspace identities and PIM for admins
• Provision capacities, Key Vault, the VNet data gateway and trusted access to the existing ADLS lake, working with Cloud Services
• Stand up Dev/Test/Prod workspaces, Git integration and deployment pipelines
• Build monitoring: workspace monitoring to Eventhouse, Capacity Metrics, Activator alerts to Teams
• Automate environment setup as code where possible
• Write platform runbooks and train the platform operations team
Hard skills
• 5+ years in Azure cloud engineering, including landing zones, networking (VNets, private endpoints, firewalls) and Key Vault
• Fabric administration: tenant settings, capacity management, gateways
• Entra ID, RBAC, service principals and managed identities
• Azure DevOps or GitHub Actions pipelines; Bicep/Terraform and PowerShell/Azure CLI
• KQL and Azure Monitor
• AZ-104, AZ-400 or DP-700 certification a plus
Soft skills
• Patient, precise partner to Cloud Services, network and Cyber teams
• Documents as they build, not after
• Calm and methodical when troubleshooting access and connectivity issues
• Excellent Communication Skills is a must
• Can work autonomously
• Self driven
