Azure Platform Engineer

Security Clearance Requirement This role is suitable for candidates who already hold UK Government Security Clearance (SC), or who are eligible and willing to undergo the SC vetting process (eligibility criteria apply).

What you’ll do

• Work alongside experienced engineers and architects to design, build and improve Azure platform foundations (landing zones, connectivity, identity, governance).
• Deliver infrastructure changes using Infrastructure-as-Code (Terraform and/or Bicep) and contribute to code reviews, testing and quality standards.
• Build and maintain CI/CD pipelines (Azure DevOps and Git), supporting repeatable, reliable deployments.
• Support platform operations: troubleshoot connectivity, identity and access, compute and storage issues; assist with patching, upgrades and incident resolution.
• Help implement Azure networking features such as VNets/subnets, routing, DNS, Private Endpoints, NSGs, firewalls and connectivity to on-premises (VPN/ExpressRoute).
• Contribute to Azure IaaS and PaaS engineering: VMs, storage, Key Vault, monitoring, App Services, Functions and other common services used in client platforms.
• Assist with Azure migrations and modernisation activities (assessment, readiness, landing zone preparation, cutover support), working with tooling such as Azure Migrate where appropriate.
• Produce clear documentation and runbooks, and communicate progress and risks to the team and client stakeholders.

What you’ll bring

• Foundational understanding of infrastructure concepts (networking, DNS, routing, load balancing, certificates, OS fundamentals) and how these apply in Azure.
• Hands‑on experience (commercial, internship, apprenticeship or personal projects) with Azure services across IaaS and/or PaaS.
• Working knowledge of DevOps practices: Git, branching, pull requests, automated deployments and basic CI/CD concepts.
• Some exposure to Infrastructure‑as‑Code (Terraform and/or Bicep) and a desire to develop strong engineering discipline beyond just writing templates (debugging, testing, operational readiness).
• Scripting skills in one or more of PowerShell, Bash or Python to automate repeatable tasks and support troubleshooting.
• A practical, customer‑focused mindset and the ability to learn quickly in complex environments.
• Clear communication: able to explain technical issues and trade‑offs to both technical and non‑technical audiences.

Nice to have

• Experience supporting production platforms (monitoring, incident response, problem management, change control).
• Exposure to hybrid connectivity and on‑premises environments (Active Directory, DNS, firewalls, proxies).
• Exposure to migration projects (server, database or application migrations) and tools such as Azure Migrate.
• Azure certifications such as AZ‑900 and/or AZ‑104 (or actively working towards them).
• Experience with Azure Policy, RBAC, Defender for Cloud, Linux, Kubernetes and secure‑by‑design practices.

Benefits

• Structured learning and paid certifications with clear pathways to progress into senior engineering and architecture roles.
• Work on varied client engagements, including regulated environments where quality and security matter.
• Supportive, collaborative culture with mentoring from experienced practitioners across the global Avanade community.

Equal Opportunity

Avanade is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.