Join us as an IT Platforms Engineer and play a key role in shaping the foundation of our enterprise public cloud environment. You'll be responsible for building and governing scalable, secure, and automated cloud platforms that empower teams across the organization to innovate with confidence.

Working within the Platforms team, you'll design and manage cloud foundations such as landing zones, account and subscription structures, shared services, technical guardrails, and reusable infrastructure-as-code solutions. Your work will ensure our cloud environments are secure by default, compliant, cost-transparent, highly observable, and ready for seamless adoption by engineering, infrastructure, security, and business teams. This is a unique opportunity to drive cloud standardization and enable controlled self-service at enterprise scale.

• Strong experience with public cloud platforms, especially platform engineering, landing zones, and cloud governance.
• Experience managing cloud account, subscription, project, folder, or management group structures.
• Hands-on experience implementing cloud guardrails, policies, tagging standards, logging baselines, compliance controls, and security hardening.
• Hands-on experience with infrastructure as code and automation.
• Understanding of cloud IAM/RBAC, privileged access, managed identities, service principals, and access governance from a cloud platform perspective.
• Understanding of public cloud networking concepts such as VPC/VNet, subnets, routing, private endpoints, DNS, ingress/egress, and hybrid connectivity.
• Experience with cloud monitoring, logging, audit trails, backup, recovery, and disaster recovery foundations.
• Ability to translate architecture, security, compliance, and operational requirements into implemented technical controls.
• Strong troubleshooting, documentation, and communication skills in complex enterprise environments. English on communication level.

Public Cloud Platform Engineering & Landing Zones

• Build, maintain, and operate enterprise public cloud landing zones and shared platform foundations.
• Manage cloud account, subscription, project, management group/folder, and environment structures.
• Enable controlled self-service cloud consumption through standard environment models, approved templates, automation, and documentation.

Cloud Governance, Guardrails & Standards

• Implement and maintain baseline cloud policies, technical guardrails, and configuration standards.
• Enforce mandatory controls for tagging, naming, logging, audit trails, encryption, allowed regions, resource types, backup, and compliance.
• Maintain lifecycle governance for cloud accounts, subscriptions, and projects, including ownership, review, cleanup, and decommissioning.

Platform Automation & Infrastructure as Code

• Build and maintain reusable infrastructure-as-code modules, templates, blueprints, and automation patterns for cloud platform services.
• Automate landing zone deployment, baseline configuration, policy assignment, logging setup, and guardrail implementation.
• Maintain version-controlled platform code and provide approved modules and patterns for DevOps teams while workload deployment remains outside this role.

Shared Cloud Services

• Design, implement, and operate shared cloud capabilities such as central logging, monitoring integrations, secrets/key management foundations, backup/DR baselines, and automation services.
• Prepare common platform services including container platform foundations, standard images, service catalog patterns, and cloud management tooling.
• Ensure shared services are secure, monitored, cost-visible, documented, and supportable, with operational handover to IT Operations.

Security, Compliance & Identity Guardrails

• Implement technical controls based on security policies, compliance requirements, and approved architecture standards.
• Govern cloud RBAC, service principals, managed identities, and privileged access guardrails in cooperation with Identity and Security teams.

Cloud Operations (L2/L3 Support)

• Provide advanced operational support for cloud foundations, shared services, guardrails, and platform automation.
• Troubleshoot complex public cloud issues, perform root cause analysis, and implement permanent fixes.
• Support incident, problem, and change management while continuously improving platform stability, supportability, governance, and automation.