Role Purpose

You will be a member of a new Azure squad, building an enterprise Azure platform as reusable, versioned products: landing zones, Terraform modules, policy baselines, standard images and CI/CD pipelines, all consumed through a self-service developer portal. As a senior engineer you will own significant components end to end and help set the squad's standards from day one.

Key Responsibilities

- Platform engineering:

Design and build Azure landing zone components — subscription vending, networking, identity integration, policy baselines and guardrails — as reusable Terraform modules.

- Component ownership:

Own significant platform products end-to-end: design, build, test, documentation and release management.

- CI/CD pipelines:

Build and maintain GitHub Actions pipelines for infrastructure delivery, with security scanning, policy checks, testing and cost controls embedded as quality gates.

- Azure Local and hybrid:

Contribute to the engineering of Azure Local capability and hybrid automation, extending the platform model into the client's private cloud estate.

- Standard images:

Build and maintain pipelines for hardened compute standard images (build, test, publication).

- Self-service products:

Package platform capabilities for consumption as self-service golden paths through the Port.io developer portal catalogue.

- Engineering standards:

Help establish squad conventions — code review discipline, module structure, testing standards and documentation — and uphold them through peer review.

- Mentoring:

Support and coach the squad's mid-level engineers; contribute to design discussions with the Engineering Lead and Platform Architect.

Essential

- 10+ years:

in infrastructure, cloud or DevOps engineering, of which 8+ years hands-on Azure engineering.

- Azure platform depth:

Strong experience with enterprise Azure — management groups, subscription design,



Azure Policy, networking (hub-spoke or vWAN), Entra ID and security baselines.

- Terraform:

Advanced, production Terraform experience: writing reusable modules, managing state, versioning and testing infrastructure code.

- Secure platform engineering:

Building secure-by-default infrastructure as a standard part of module design: identity and least-privilege design, guardrails and policy enforcement, and secrets management.

- Testing infrastructure code:

Validating infrastructure code properly, through module testing, plan review discipline and pre-merge automated checks.

- Engineering discipline:

Solid Git workflow, code review and documentation habits;

experience working in sprint-based agile teams.

- Collaboration:

Comfortable working in a distributed team with UK-based technical leadership and client stakeholders; clear written and spoken English.

Nice to Have

- CI/CD platform:

GitHub Actions preferred.

Azure

DevOps or GitLab CI transfer directly.

- Hybrid:

Azure Local, Azure Stack HCI or Azure Arc.

- Security tooling:

Policy-as-code (OPA, Sentinel), IaC scanning (Checkov, Wiz, tfsec), and Terratest or similar module testing frameworks.

- Scripting in Python, PowerShell or Bash for automation tooling.

- Experience in financial services or similarly regulated environments

.

- Microsoft certifications

(AZ-104 Azure Administrator, AZ-305 Azure Solutions Architect, AZ-400 DevOps Engineer).

Technologies & Tools The squad's toolchain:

- Core:

Azure, Azure Local (Azure Stack HCI), Azure Arc, Terraform, GitHub and GitHub Actions.

- Policy and security:

Azure Policy, Wiz and Checkov for IaC scanning, and OPA for policy-as-code.

- Pipeline quality:

tflint, terraform-docs, Infracost and Terratest.

- Consumption:

The Port.io internal developer portal, which is how teams consume platform products.

- Standard images:

Image pipelines for hardened compute images.

📌 Azure Platform Engineer (Pune)
🏢 Trigent Software - Professional Services
📍 Pune