Azure Solutions Engineer

We are seeking an experienced Azure Solutions Engineer (with Architecture work) to establish and drive the implementation, strategic architecture, governance, and technical foundation of our Microsoft Azure platform. While the role focuses on engineering the CI/CD pipelines that deliver platform and application changes into it, it will also cover managing architecture and governance. The role thus sits at the intersection of hands-on platform engineering and architecture, with an emphasis on data and integration patterns. This is a dual-mandate role: roughly 60-70% engineering/build and 30–40% architecture. 

You will be assigned with one of our clients, a data center and digital service provider based in Switzerland.

You will work closely with IT Platform Services, Cybersecurity, Enterprise Architecture, IT Application Services, Network, and Data teams to develop a scalable, secure, and well-governed Azure environment supporting possibly both Azure Cloud and Azure Local deployments.

Responsibilities

Platform Engineering 

• Design, build, and maintain CI/CD pipelines (Azure DevOps and/or GitHub Actions) for infrastructure-as-code and application deployments.
• Implement Infrastructure-as-Code using Bicep and/or Terraform, with modular, reusable templates aligned to landing zone standards.
• Build and maintain deployment pipelines for containerized workloads (AKS, Azure Container Apps) and serverless components (Azure Functions, Logic Apps).
• Establish pipeline security practices: secret scanning, dependency scanning, policy-as-code (Azure Policy / OPA), and compliance gates.
• Support platform observability: monitoring, alerting, and logging pipeline for deployed workloads (Azure Monitor, Log Analytics, Application Insights).

Platform Architecture 

• Architecture: Act as technical authority for Azure platform decisions — IaaS, PaaS, networking, identity, security posture. Own and evolve the Azure landing zone architecture following the Cloud Adoption Framework (CAF), including hub-and-spoke network topology and management group hierarchy with Architecture team.
• Governance and Standards: Establish Azure governance, policies, standards, ADRs, and enterprise cloud controls while driving compliance, architecture governance, and cloud capability maturity with Architecture & Digital Business Transformation teams.
• Networking and Infrastructure: Design and govern secure Azure networking, hybrid connectivity, private networking, and infrastructure architecture across cloud and on-premises environments. Define and maintain standards for network segmentation, private endpoints, hybrid/on-prem connectivity, internet egress/ingress, and key/secrets management.
• Security Architecture: Establish Azure security baselines, Zero Trust architectures, security controls, and governance to support compliance and secure-by-design principles with Cybersecurity team.
• Cloud Engineering Standards: Define Infrastructure-as-Code, automation, reusable deployment patterns, and cloud engineering standards using tools such as Terraform and Bicep.
• Data & Integration: Provide architectural guidance for Microsoft Fabric, event-driven integration, API management, and governed deployment of data and integration platforms with Digital Business Transformation team.
• Cost Management: Monitor cloud resource utilization, implementing FinOps strategies to optimize infrastructure costs without compromising performance or reliability with Digital Business Transformation team.
• Collaboration and Advisory: Act as the Azure technical authority, providing architectural leadership, mentoring, and guidance to enterprise, application, data, DevOps, and security teams.

Qualifications

• Bachelor's degree in Computer Engineering or Software Engineering in a related technical field or equivalent practical experience.
• Comfortable operating both as an architect (option analysis, trade-offs, governance) and as an engineer (writing and maintaining pipeline/IaC code directly).
• 6+ years of hands-on experience in Microsoft Azure, with at least 3+ years of experience designing enterprise-grade solutions on Microsoft Azure.
• Experience with Azure API Management.
• Proven experience designing and operating an Azure landing zone at enterprise scale (CAF/ALZ or equivalent).
• Strong hands-on engineering skills: IaC (Bicep or Terraform), scripting (PowerShell and/or Bash), and CI/CD tooling (Azure DevOps Pipelines or GitHub Actions).
• Solid understanding of Azure networking (hub-and-spoke, VNet peering, private endpoints, ExpressRoute/VPN), identity (Entra ID, RBAC, managed identities), and security fundamentals.
• Working knowledge of containerization and orchestration (Docker, AKS or Container Apps).
• Experience producing architecture documentation and decision records, and presenting to a review board or comparable governance body.
• Familiarity with integration patterns (event streaming, API management)

Preferred Qualifications

• Microsoft Certified:
• Azure Solutions Architect Expert (AZ-305),
• Azure DevOps Engineer Expert (AZ-400), or
• Azure Data Engineer Associate (DP-203)
• Experience with architecture frameworks (TOGAF preferred)
• Experience with hybrid and multi-cloud environments.
• Familiarity with NIST, ISO 27001, CIS Benchmarks, or similar security and governance frameworks.
• Experience with data (data integration and IoT) focused cloud environments.
• Experience with Microsoft Fabric and Data Vault.
• Familiarity with data platform concepts (data lakehouse / medallion architecture)
• Exposure to OT/IoT ingestion patterns (e.g., Event Hubs-based telemetry pipelines)
• Experience working in a regulated or infrastructure-heavy industry (datacenter, telco, financial services, utilities).
• Familiarity with ServiceNow or similar ITSM/CMDB platforms and their boundary with cloud infrastructure
• Experience with policy-as-code and compliance automation (Azure Policy, Defender for Cloud)

Benefits

• Be part of an epic team that prioritizes your personal and professional growth
• HMO insurance coverage starts from the 1st working day.
• Vacation and sick leave credits (pro-rated) start from the 1st working day.
• Company-issued laptop included to ensure smooth and efficient work experience
• Earn rewards with our Employee Referral Program
• Enjoy flexible working time that align with the client's core hours
• Flexible work location, several office locations across Metro Manila and work-from-home (WFH)
• Access to free training, certification programs, and fun community/social activities
• Collaborate in an international, multicultural working environment