Lead Cloud Platform Engineer (Azure, Databricks & DevSecOps)

We are a rapidly-growing consumer intelligence platform processing over 50 billion data points monthly to deliver actionable insights for global brands such as Coca-Cola, Bayer, and Unilever. The platform runs on Azure, Databricks, and GenAI workflows and is scaling for faster delivery, stronger security, and tighter cost control.

• 7+ years in DevOps, Cloud, Platform, Infrastructure, or Systems Engineering with 4+ years hands-on with Azure in production. • Deep knowledge of Azure subscriptions, RBAC, policies, networking, storage, monitoring, and security. • Experience administering Entra ID and Microsoft 365. • Production experience with Kubernetes (preferably AKS). • Experience managing or supporting Azure Databricks infrastructure including workspace admin, compute, networking, secure storage access, identity, and audit logging. • Experience with CI/CD tools Azure DevOps and/or GitHub Actions, plus scripting skills in PowerShell, Azure CLI, Bash, or Python. • Strong understanding of cloud security concepts including least privilege, secrets management, encryption, and auditability.

Nice to have:

• Experience in AI, data, analytics, or SaaS environments.
• Knowledge of Infrastructure as Code tools: Terraform, Bicep.
• Familiarity with SOC 2, ISO 27001, GDPR compliance.
• Experience with Microsoft Defender for Cloud and DevSecOps tooling.
• FinOps and Databricks cost optimization experience.
• Experience working with distributed or offshore teams.

• Own Azure subscriptions, governance, networking (VNets, private endpoints, DNS, NSGs), storage (ADLS Gen2, Blob), Azure SQL, Key Vault, and monitoring across all environments. • Administer Entra ID and Microsoft 365 including identities, MFA, Conditional Access, and access management. • Manage Azure Databricks infrastructure and security: secure connectivity, networking, identity integration, compute policies, audit logging, and cost controls. • Build and improve CI/CD using Azure DevOps, GitHub Actions and implement Infrastructure as Code using Terraform, Bicep, or ARM. • Operate and secure Kubernetes/AKS environments and supporting application infrastructure. • Strengthen security and DevSecOps posture; support SOC 2 evidence, security questionnaires, and enterprise reviews. • Build monitoring, dashboards, runbooks, and incident response for the platform. • Drive Azure and Databricks cost optimization through tagging, budgets, alerts, and compute tuning.

Please be informed that the data controller is Kratos Growth (hereinafter "controller"). You have the right to request access to your personal data, their rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability and to lodge a complaint to the supervisory authority. Personal data will be processed for the purpose of the recruitment process. Provision of data to the extent resulting from the Act of 26 June 1974 Labour Code is mandatory. In the remaining scope, providing data is voluntary. Refusal to provide mandatory data may result in the impossibility to carry out the recruitment process. The Administrator processes mandatory data on the basis of a legal obligation incumbent upon him/her, while with regard to additional data, the basis for processing is consent. Personal data will be processed until the recruitment procedure is completed and for the period of the possibility of asserting potential claims, and in the case of consent to participate in future recruitment procedures - until the withdrawal of such consent. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data is the Just Join IT service and other entities to whom we have entrusted the processing of data in connection with recruitment.