Platform Engineer

The Platform Engineer will be a key member of the Platform Team responsible for enabling development, deployment, and operation of applications across the organization. The role involves designing, building, and maintaining shared foundations including pipelines, infrastructure, and tooling. The position focuses on Azure cloud infrastructure, Azure DevOps, Kubernetes, Terraform, and platform security.

• Hands-on experience with Azure Kubernetes Service (AKS) including networking, ingress, node pools, autoscaling, confidential compute, and Helm chart deployments.
• Strong understanding of CI/CD principles, GitFlow branching, environment promotion, and deployment automation.
• Familiarity with .NET 10 build toolchain, NuGet, project structure, and containerizing .NET applications.
• Proficiency in PowerShell Core 7+ with module, class, and Pester test development, including robust scripting and error handling.
• Broad experience with Azure services: Key Vault, Container Registry, Service Bus, Storage Accounts, SQL Database, Managed Identities, RBAC.
• Understanding of cloud architecture principles: scalability, high availability, security, cost management.
• Experience with Azure DevOps (TFS): YAML pipelines, templates, repositories, service connections, agent pools, artifacts.
• Ability to author multi-stage YAML pipeline templates with parameterization and template composition.
• Experience writing and maintaining Terraform configurations with various providers and state management.
• Understanding of network concepts relevant to AKS and Azure such as VNets, NSGs, private endpoints, DNS, ingress controllers, proxy configuration.
• Ability to reason about system architecture including separation of concerns and platform design.

Nice to have:

• Experience with Keycloak or OpenID Connect.
• Familiarity with Docker and container image build optimization.
• Knowledge of database deployment automation tools like DACPAC and sqlpackage.
• Experience with SonarQube or similar code quality tools.
• Familiarity with confidential computing on Azure.
• Experience with OpenShift container platform.

Platform Engineering & Infrastructure:

• Design, build, and maintain Azure Kubernetes Service (AKS) clusters including networking, ingress, autoscaling, and confidential compute workloads.
• Manage Azure cloud platform services such as subscriptions, resource groups, Key Vault, Azure Container Registry, Service Bus, Storage Accounts, and SQL databases.
• Operate and support OpenShift environments.
• Ensure platform security, reliability, and compliance with organizational standards including network policies, managed identities, TLS, and RBAC.

CI/CD Pipeline Development & Maintenance:

• Develop and maintain shared reusable CI/CD pipeline templates (YAML) in Azure DevOps.
• Build and optimize multi-stage deployment pipelines for .NET 8 applications, including container image builds (Docker/ACR), database deployments (DACPAC/sqlpackage), and Service Bus provisioning.
• Author and maintain PowerShell Core 7+ modules and scripts for pipeline logic related to configuration, deployment, secret retrieval, Terraform variables, and Helm-based deployments.
• Enforce security and quality gates (SonarQube) and environment promotion controls through pipelines.
• Standardize deployment patterns for consistent release workflows.

Infrastructure as Code (IaC):

• Design and maintain Terraform modules for Azure resources including AKS workloads via Helm, Keycloak identity clients, SQL users, managed identities, Key Vault HSM keys, and Service Bus RBAC.
• Automate provisioning and management of infrastructure using Terraform, Azure CLI, and PowerShell.
• Manage Terraform state with Azure Storage backend and AAD authentication.

Repository & Azure DevOps Administration:

• Administer shared repositories and deployment configuration repositories.
• Support version control practices and branching strategy (GitFlow).
• Manage Azure DevOps service connections, agent pools, variable groups, and environment approvals.

Collaboration & Enablement:

• Bridge infrastructure and application teams to integrate platform capabilities.
• Provide guidance on platform standards, deployment configurations, pipeline extensions, and troubleshooting.
• Write and maintain documentation for consumer teams.
• Review shared platform code contributions for architecture consistency and compatibility.

Informujemy, że administratorem danych jest emagine z siedzibą w Warszawie, ul.Domaniewskiej 39A (dalej jako "administrator"). Masz prawo do żądania dostępu do swoich danych osobowych, ich sprostowania, usunięcia lub ograniczenia przetwarzania, prawo do wniesienia sprzeciwu wobec przetwarzania, a także prawo do przenoszenia danych oraz wniesienia skargi do organu nadzorczego. Dane osobowe przetwarzane będą w celu realizacji procesu rekrutacji. Podanie danych w zakresie wynikającym z ustawy z dnia 26 czerwca 1974 r. Kodeks pracy jest obowiązkowe. W pozostałym zakresie podanie danych jest dobrowolne. Odmowa podania danych obowiązkowych może skutkować brakiem możliwości przeprowadzenia procesu rekrutacji. Administrator przetwarza dane obowiązkowe na podstawie ciążącego na nim obowiązku prawnego, zaś w zakresie danych dodatkowych podstawą przetwarzania jest zgoda. Dane osobowe będą przetwarzane do czasu zakończenia postępowania rekrutacyjnego i przez okres możliwości dochodzenia ewentualnych roszczeń, a w przypadku wyrażenia zgody na udział w przyszłych postępowaniach rekrutacyjnych - do czasu wycofania tej zgody. Odbiorcą danych jest serwis Just Join IT oraz inne podmioty, którym powierzyliśmy przetwarzanie danych w związku z rekrutacją.