We are looking for an experienced Azure Platform Solution Architect and Developer to enable application teams to onboard and operate on a secure, governed Azure platform. The role focuses on developer experience and platform enablement by delivering reusable IaC, policy-driven guardrails, subscription vending automation, and self-service capabilities. The position operates across platform, security, and application teams in large-scale enterprise environments. Responsibilities
Lead onboarding of new application teams to the Azure platform, providing hands-on architectural guidance and ensuring alignment with approved patterns and guardrails Act as a trusted advisor to development teams, supporting solution design decisions with a strong developer-centric perspective Design and evolve reusable IaC templates and platform patterns, embedding Azure Policy and secure-by-default principles Develop and enhance self-service capabilities in Backstage, enabling seamless onboarding, discovery, and consumption of platform services Contribute to and improve the subscription vending solution, integrating IaC templates, governance controls, and automation workflows Enable application teams to self-manage their landing zones, including RBAC, metadata (cost center, ownership), and lifecycle through Backstage Build and integrate API-driven workflows to support platform automation, self-service, and system interoperability Continuously identify and remove friction in the developer journey, improving onboarding experience and driving platform adoption
Drive a seamless, secure-by-default onboarding experience where application teams can independently design, provision, and manage their solutions through standardized patterns and self-service capabilities
Requirements
Mandatory
Highly skilled Azure Platform Solution Architect with a strong hands-on background, focused on enabling application teams to onboard solutions onto a secure, governed Azure platform.
Acts as a trusted advisor, guiding teams in adopting approved patterns while balancing governance, scalability, and flexibility.
Brings a developer-first mindset and speaks the same language as application teams, ensuring practical and usable architecture guidance.
Experienced in Azure Landing Zones (CAF, Well-Architected Framework), embedding secure-by-default principles into reusable platform patterns and IaC templates.
Drives developer experience by building self-service capabilities in Backstage, enabling teams to onboard, provision landing zones, and manage RBAC and metadata independently.
Contributes to subscription vending and automation, integrating APIs, IaC, and policy guardrails into a seamless experience.
Operates with a code-first, product mindset, delivering reusable, version-controlled platform capabilities designed to reduce friction and maximize adoption.
Extensive background working in large-scale enterprise environments (multi-tentant and 300+ subscriptions), enabling standardized, automated, and policy-driven platforms that balance governance, agility, and developer self-service.
Solution Architecture (Strong ability to design scalable, secure, and governed cloud architectures aligned with CAF and Well-Architected Framework)
Governance & Security (Strong understanding of secure-by-default principles, policy-as-code, compliance, and enterprise guardrails)
API & Integration (Experience designing, consuming, and integrating REST APIs to enable automation, self-service workflows, and platform interoperability)
Platform Engineering (Ability to design and deliver platform capabilities as reusable products with automation, CI/CD, and strong governance integration)
Developer portal / Software development (Experience building and integrating self-service capabilities, templates, and workflows in Backstage (or similar platforms). Typescript, React, Expressjs, .NET)
Application Authentication (OAuth2/OIDC flows, client credentials, certificate-based auth, Microsoft Graph API (API permissions (delegated vs application), workload identity federation))
Infrastructure as Code & Automation (Bicep, AVM, PowerShell, Python)
