Cloud / Platform (DevOps) Engineer (AZURE LANDING ZONE PROVISIONING NETWORK & SECURITY)

Azure landing zone provisioning network & security

Role Summary

Stands up and secures the platform provisions the environments, wires CI/CD, and implements the network and identity architecture everything depends on.

Key Responsibilities

• Environment provisioning. Stand up Dev and Prod via infrastructure-as-code; configure compute, storage, roles, and permissions.
• CI/CD. Implement DevOps practices and GitHub pipelines for version-controlled promotion and automated deployment.
• Network architecture. Implement secure connectivity (VPN, ExpressRoute, VNets) and the Azure data landing zone with segmentation and controls.
• Security controls. Implement encryption, ingress/egress controls, service accounts, RBAC, and MFA aligned to enterprise identity standards.

Minimum Qualifications (MQ)

• 5+ years in cloud platform / DevOps / infrastructure engineering, primarily Azure.
• Hands-on infrastructure-as-code (Terraform, Bicep, or ARM) and GitHub CI/CD.
• Strong networking and security: VNets, VPN/ExpressRoute, landing zones, RBAC, MFA, encryption.
• Experience provisioning and securing modern data platform environments.

Desired Qualifications (DQ)

• Azure certifications (Administrator, DevOps, or Security Engineer).
• Enterprise identity management integration experience.
• Public-sector security/compliance exposure.