Portfolio BI

Platform Engineer

• Act as the technical owner of the Azure platform
• Work closely with external development and engineering partners
• Ensure deployed systems align with intended architecture and support secure, stable operations
• Improve ownership across Identity and Access Management, Disaster Recovery, and Monitoring and Observability
• Oversee Azure subscriptions, landing zones, networking, compute, databases and Microsoft 365 tenant configuration
• Validate deployed infrastructure against documented architecture and security requirements
• Review Entra ID, Conditional Access, authentication flows, RBAC, PIM, emergency access, service identities and guest/B2B and client-facing identities
• Ensure least-privilege access, effective joiner/mover/leaver processes, recurring access reviews and removal of orphaned identities
• Reconcile permissions and access dependencies across Microsoft 365, Azure, Azure DevOps and applications
• Oversee Key Vault, secrets, certificates and rotation
• Assess and improve disaster recovery, including recovery units, shared dependencies, RTOs/RPOs, backups, database replication, point-in-time restoration and multi-region design
• Run restore and failover exercises, maintaining runbooks, responsibilities and test evidence
• Improve service-health monitoring using Azure Monitor, Log Analytics, KQL and Application Insights
• Map services to monitoring signals, tune alerts, and distinguish customer-facing status from operational diagnostics
• Troubleshoot production issues across infrastructure, applications, APIs and integrations
• Maintain practical runbooks and technical documentation
• Maintain Terraform configurations, modules and state; detect configuration drift
• Support Azure DevOps pipelines and permissions, and develop PowerShell scripts and automation
• Apply Azure Policy and landing-zone guardrails
• Maintain tagging, naming and subscription standards
• Improve cost management, including telemetry retention and access
• Act as the internal technical counterpart to external providers, challenge proposed changes, and communicate gaps, risks and recommendations

Senior Azure & Microsoft 365 Platform Engineer