Azure Platform Engineer

About the role

We are seeking an Azure Platform Engineer to lead the design and ongoing ownership of the Azure foundation supporting a multi-year municipal modernization program.

This role owns the Azure landing zone, environment structure, CI/CD standards, and infrastructure-as-code strategy. All cloud resources must be provisioned and managed via IaC to ensure repeatability, audit ability, and compliance across the program.

This is a hands-on engineering role with platform ownership responsibilities. Application Engineers will rebuild business logic; this role ensures the cloud foundation they deploy into is secure, standardized, auditable, and production-ready.

What you'll do

• Design and implement (or enhance) Azure landing zone architecture
• Establish and manage dev, test, and production environments with strict separation
• Define secure networking, identity, and role-based access boundaries
• Configure VNETs, NSGs, private endpoints, and hybrid connectivity (VPN / ExpressRoute)
• Establish standardized patterns for App Services, Azure SQL, storage, and shared services
• Define platform standards to be used consistently across consolidated applications
• Design and maintain standardized CI/CD pipelines in Azure DevOps
• Develop reusable pipeline templates and release patterns
• Implement approval gates, rollback strategies, and deployment controls aligned to audit requirements
• Ensure consistent deployment practices across application teams
• Ensure all infrastructure deployments are executed through CI/CD pipelines using IaC templates (no manual provisioning)
• Establish IaC as the only approved deployment mechanism for cloud resources
• Enforce code review, version control, and change traceability for all infrastructure changes
• Prevent manual configuration drift across environment
• Embed FedRAMP Moderate–aligned controls into platform design
• Implement centralized logging, monitoring, and retention policies
• Configure Azure Policy and Defender for Cloud guardrails
• Implement secrets and certificate management using Azure Key Vault
• Establish audit traceability for infrastructure and deployment changes
• Support disaster recovery and business continuity planning and testing
• Support production deployments and release windows
• Troubleshoot infrastructure and pipeline issues
• Define and maintain platform standards and operational runbooks

Qualifications

• A Bachelors' degree in a related field and 4+ years' experience in DevOps, platform engineering, or cloud infrastructure
• Proven experience designing and owning Azure landing zones in enterprise environments
• Strong hands-on Azure experience in regulated or audit-sensitive environments
• Deep experience with Azure DevOps CI/CD pipeline design
• Demonstrated ownership of enterprise-scale Infrastructure-as-Code programs (Terraform or Bicep), including governance and enforcement of IaC-only deployment standards
• Experience embedding compliance and security controls into cloud platforms
• Working knowledge of FedRAMP Moderate or comparable compliance frameworks

Preferred

• Experience supporting municipal or public sector programs
• Experience leading on-premises (on-prem) to Azure migrations
• Azure certifications (Administrator, DevOps Engineer, Architect)

Other Info

• Contract to hire position, successful candidate will be a W2 contractor through a staffing partner.
• The position is expected to be remote, though infrequent domestic travel may be required.
• The successful candidate will be expected to pass background checks, including employment and education verifications, along with physical location verifications.
• Team members must be available to work 8:30am - 5:30pm EST Monday - Friday.