Platform Engineer

Kestra Holdings • Tempe, AZ

9d

About The Position

Lead with Purpose. Partner with Impact. We are seeking a highly skilled and proactive Cloud Platform Engineer to join our Platform Engineering team. In this key role, you will leverage deep Azure expertise and strong automation capabilities, and a platform-engineering mindset to build secure, scalable, and self-service cloud infrastructure that empowers engineering teams. You will enhance platform reliability, streamline cloud operations, and collaborate closely with other engineering partners to support mission-critical workloads and drive continuous improvement across our cloud platform. What You’ll Do Design and deploy secure, scalable Azure-based applications, data workloads, and integration services aligned with long-term platform strategy. Build and maintain core platform components that enhance developer productivity and support mission-critical workloads. Implement and maintain Infrastructure as Code (IaC) using Bicep, Terraform, and ARM templates to ensure consistent, repeatable, and secure environment provisioning. Develop automation scripts and runbooks to streamline provisioning, configuration, and operational workflows while keeping IaC aligned with deployed environments. Create self-service tooling and templates that enable engineering teams to deploy and operate services with minimal friction. Provide cloud-centric guidance and mentorship to engineers adopting platform tooling, IaC patterns, and cloud best practices. Partner with Engineering teams to implement Azure Governance to drive platform best practices and support architecture decisions. Monitor and optimize cloud infrastructure for performance, cost efficiency, and reliability proactively implementing improvements that enhance platform capabilities and reduce manual operational effort. Contribute to incident response, design reviews, and platform roadmap planning to ensure reliability and continuous improvement. What You Bring 4-8 years of experience in cloud engineering, platform engineering, DevOps, or infrastructure roles with a strong focus on Azure. 2+ years managing Azure tenants and resources, including governance, access control, and lifecycle operations. (Preferred) Proven experience designing, deploying, and supporting distributed applications in Azure or hybrid cloud environments. Deep expertise with Azure governance and identity, including Azure AD, RBAC, Privileged Identity Management (PIM), and Azure Policy. Strong hands-on experience managing Azure services and platform offerings across compute, storage, and data services (VMs, App Services, Functions, Container Apps, Service Bus, Storage Accounts, Azure SQL, Cosmos DB, Databricks, Data Factories and Data Lake storage). Strong Azure networking knowledge, including VNETs, subnets, NSGs, routing, private endpoints, firewalls, load balancers, Application Gateway, Front Door, and hybrid connectivity patterns. Hands-on experience with Azure Monitor, Log Analytics, Kusto/KQL, and cloud observability best practices. Solid understanding of web application architecture, RESTful APIs, and cloud‑native patterns. Experience managing VMs, Elasticsearch, backup solutions, and cloud-native security controls; familiarity with Rubrik is a plus. Working knowledge of IIS, FTP servers, SQL Server 2017, and Windows Server 2019/2022. Familiarity with Git workflows, CI/CD pipelines (Azure DevOps or GitHub Actions), and modern DevOps practices. Strong scripting skills (PowerShell, Bash) for automation and operational tooling. Ability to translate complex technical concepts into clear, actionable communication for diverse audiences. Demonstrated ownership, accountability, and the ability to deliver results with minimal oversight. Exposure to C#/.NET, React/TypeScript, or legacy systems (Angular, .NET Framework 4.x) is beneficial.

Requirements

• 4-8 years of experience in cloud engineering, platform engineering, DevOps, or infrastructure roles with a strong focus on Azure.
• Proven experience designing, deploying, and supporting distributed applications in Azure or hybrid cloud environments.
• Deep expertise with Azure governance and identity, including Azure AD, RBAC, Privileged Identity Management (PIM), and Azure Policy.
• Strong hands-on experience managing Azure services and platform offerings across compute, storage, and data services (VMs, App Services, Functions, Container Apps, Service Bus, Storage Accounts, Azure SQL, Cosmos DB, Databricks, Data Factories and Data Lake storage).
• Strong Azure networking knowledge, including VNETs, subnets, NSGs, routing, private endpoints, firewalls, load balancers, Application Gateway, Front Door, and hybrid connectivity patterns.
• Hands-on experience with Azure Monitor, Log Analytics, Kusto/KQL, and cloud observability best practices.
• Solid understanding of web application architecture, RESTful APIs, and cloud‑native patterns.
• Experience managing VMs, Elasticsearch, backup solutions, and cloud-native security controls; familiarity with Rubrik is a plus.
• Working knowledge of IIS, FTP servers, SQL Server 2017, and Windows Server 2019/2022.
• Familiarity with Git workflows, CI/CD pipelines (Azure DevOps or GitHub Actions), and modern DevOps practices.
• Strong scripting skills (PowerShell, Bash) for automation and operational tooling.
• Ability to translate complex technical concepts into clear, actionable communication for diverse audiences.
• Demonstrated ownership, accountability, and the ability to deliver results with minimal oversight.

Nice To Haves

• 2+ years managing Azure tenants and resources, including governance, access control, and lifecycle operations.
• Exposure to C#/.NET, React/TypeScript, or legacy systems (Angular, .NET Framework 4.x) is beneficial.
• Exam AZ-900: Microsoft Azure Fundamentals
• Exam AZ-104: Microsoft Azure Administrator
• Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
• Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions – Highly Desired
• AWS/GCP Certifications can be had in lieu of Microsoft Certifications

Responsibilities

• Design and deploy secure, scalable Azure-based applications, data workloads, and integration services aligned with long-term platform strategy.
• Build and maintain core platform components that enhance developer productivity and support mission-critical workloads.
• Implement and maintain Infrastructure as Code (IaC) using Bicep, Terraform, and ARM templates to ensure consistent, repeatable, and secure environment provisioning.
• Develop automation scripts and runbooks to streamline provisioning, configuration, and operational workflows while keeping IaC aligned with deployed environments.
• Create self-service tooling and templates that enable engineering teams to deploy and operate services with minimal friction.
• Provide cloud-centric guidance and mentorship to engineers adopting platform tooling, IaC patterns, and cloud best practices.
• Partner with Engineering teams to implement Azure Governance to drive platform best practices and support architecture decisions.
• Monitor and optimize cloud infrastructure for performance, cost efficiency, and reliability proactively implementing improvements that enhance platform capabilities and reduce manual operational effort.
• Contribute to incident response, design reviews, and platform roadmap planning to ensure reliability and continuous improvement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed