Senior Azure / Platform Engineer - Talent Pool

Project overview

We are looking for an experienced Azure / Platform Engineer to design, standardize, automate, and operate Kubernetes-based infrastructure in Microsoft Azure.

The engineer will focus on building and evolving a secure, repeatable cloud platform supporting multiple application and service instances, with a strong emphasis on Azure Kubernetes Service (AKS), Infrastructure as Code, networking, secrets management, security hardening, and deployment automation.

The environment supports workloads subject to stringent security and compliance requirements. Experience with Azure Government, FedRAMP, DISA STIGs, or similar regulated environments is highly valued but not mandatory.

• Design, deploy, operate, and standardize Azure Kubernetes Service (AKS) environments, including Kubernetes control-plane configuration and supporting Azure infrastructure
• Build reusable patterns for multi-instance / multi-environment Kubernetes deployments, reducing manual configuration and improving consistency between environments
• Develop and maintain Helm charts for application and infrastructure deployments, including upgrades, configuration management, and release standardization
• Design and maintain Azure networking
• Integrate and operate Azure Key Vault (AKV) for secrets, certificates, keys, and workload access
• Implement and maintain infrastructure using Terraform, including reusable modules, environment configuration, state management, and CI/CD integration
• Work with Crossplane or similar Kubernetes-native infrastructure provisioning technologies to automate cloud resource lifecycle management
• Implement and troubleshoot mTLS-based service communication, certificate management, trust chains, and secure service-to-service connectivity
• Support automated provisioning and lifecycle management of multiple platform and application instances
• Develop infrastructure and deployment automation supporting repeatable provisioning, upgrades, configuration changes, and operational processes
• Implement cloud and Kubernetes security controls required by regulated environments
• Identify and remediate infrastructure vulnerabilities and Kubernetes/cloud configuration issues
• Support remediation of DISA STIG findings and other security-hardening requirements
• Contribute to FedRAMP readiness, including implementation of technical controls, evidence generation, remediation activities, and infrastructure standardization
• Collaborate with application, security, DevOps/SRE, and architecture teams
• Strong hands-on experience with Microsoft Azure.
• Production experience with Azure Kubernetes Service (AKS) and Kubernetes administration.
• Strong experience with Helm and Helm chart development.
• Strong Terraform experience, preferably building reusable modules rather than only consuming existing Terraform code.
• Solid understanding of Azure networking, including VNets, routing, DNS, Private Endpoints, network security, ingress/egress, and connectivity troubleshooting.
• Experience with Azure Key Vault, managed identities, certificates, and secrets management.
• Good understanding of TLS/mTLS, PKI, certificate lifecycle, and secure application/service communication.
• Experience implementing CI/CD and infrastructure automation.
• Experience with Kubernetes and cloud security hardening.
• Ability to troubleshoot complex infrastructure issues across Azure, Kubernetes, networking, DNS, TLS, and application connectivity.
• Strong Linux and scripting skills, preferably Bash and/or PowerShell.
• Experience working with Git-based infrastructure and deployment workflows.

Project details

• Start: ASAP
• Location: Remote, Łódź, PL