Azure Platform Engineer

About this role

<p><span style="text-decoration: underline;"><strong>Azure Platform Engineer </strong></span></p> <p>Role Summary </p> <p>We are seeking an Azure Platform Engineer to lead the design and ongoing ownership of the Azure foundation supporting a multi-year municipal modernization program. </p> <p>This role helps to oversee Azure environment structure, CI/CD standards, and infrastructure-as-code strategy. All cloud resources must be provisioned and managed via IaC to ensure repeatability, auditability, and compliance across the program. </p> <p>This is a hands-on engineering role with platform ownership responsibilities. Application engineers will rebuild business logic; this role ensures the cloud foundation they deploy into is secure, standardized, auditable, and production-ready. </p> <p>Key Responsibilities </p> <ul> <li>Platform Architecture & Environment Ownership </li> <li>Establish and manage dev, test, and production environments with strict separation </li> <li>Define secure networking, identity, and role-based access boundaries </li> <li>Configure VNETs, NSGs, private endpoints, and hybrid connectivity (VPN / ExpressRoute) </li> <li>Establish standardized patterns for App Services, Azure SQL, storage, and shared services </li> <li>Define platform standards to be used consistently across consolidated applications </li> </ul> <p>CI/CD & Deployment Standards </p> <ul> <li>Design and maintain standardized CI/CD pipelines in Azure DevOps </li> <li>Develop reusable pipeline templates and release patterns </li> <li>Implement approval gates, rollback strategies, and deployment controls aligned to audit requirements </li> <li>Ensure consistent deployment practices across application teams </li> <li>Ensure all infrastructure deployments are executed through CI/CD pipelines using IaC templates (no manual provisioning) </li> </ul> <p>Infrastructure as Code </p> <ul> <li>All infrastructure must be provisioned and maintained via Terraform or Bicep </li> <li>Establish IaC as the only approved deployment mechanism for cloud resources </li> <li>Enforce code review, version control, and change traceability for all infrastructure changes </li> <li>Prevent manual configuration drift across environments </li> </ul> <p>Security, Compliance & Observability </p> <ul> <li>Embed FedRAMP Moderate–aligned controls into platform design </li> <li>Implement centralized logging, monitoring, and retention policies </li> <li>Configure Azure Policy and Defender for Cloud guardrails </li> <li>Implement secrets and certificate management using Azure Key Vault </li> <li>Establish audit traceability for infrastructure and deployment changes </li> <li>Support disaster recovery and business continuity planning and testing </li> </ul> <p>Operational Excellence </p> <ul> <li>Support production deployments and release windows </li> <li>Troubleshoot infrastructure and pipeline issues </li> <li>Define and maintain platform standards and operational runbooks </li> <li>Implement cost governance and resource optimization strategies </li> </ul> <p>Required Qualifications </p> <ul> <li>A Bachelors’ degree in a related field, along with at least 5 years' experience in DevOps, platform engineering, or cloud infrastructure </li> <li>Strong hands-on Azure experience in regulated or audit-sensitive environments </li> <li>Experience with Azure DevOps CI/CD pipeline design </li> <li>Demonstrated ownership of enterprise-scale Infrastructure-as-Code programs (Terraform), including governance and enforcement of IaC-only deployment standards </li> <li>Experience embedding compliance and security controls into cloud platforms </li> <li>Working knowledge of FedRAMP Moderate or comparable compliance frameworks </li> </ul> <p><strong>Preferred </strong></p> <ul> <li>Experience supporting municipal or public sector programs </li> <li>Experience leading on-premises to Azure migrations </li> <li>Azure certifications (Administrator, DevOps Engineer, Architect) </li> </ul> <p><span style="text-decoration: underline;"><strong><span data-contrast="auto">Other Info</span> </strong></span></p> <ul> <li>This position may require infrequent though unlikely travel (to client sites).</li> <li>Team members must be able to accommodate a working schedule of 8:30am - 5:30p EST Monday through Friday. </li> <li>No agencies, please: unsolicited agency communications will be blocked, unsolicited candidate profiles will be considered direct applicants. </li> </ul> <ul> <li><span data-contrast="auto">Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. </span><span data-contrast="auto">Alpha will not…