DevEx Platform Engineer

Role Overview

• Design and own environment-management foundations (env repos, env modules, promotion patterns) for consistent Dev/Stage/Prod provisioning.
• Publish and govern Terraform modules, managing registry operations, versioning, reviews, documentation standards, and deprecation.
• Administer Terraform Cloud workspaces, policies/approvals, secure variables, and run workflows for scalable delivery.
• Define and enforce platform IAM standards across Azure and tooling (RBAC, managed identities, service principals), including SP→MI modernization and governance integration.
• Implement secrets-binding patterns with Azure Key Vault, including access models, references, and rotation across IaC workflows.
• Lead FinOps enablement: tagging/labeling, budgets/alerts, and cost/productivity KPI dashboards using Cloudability.
• Administer platform tooling (GitHub, Azure DevOps, Docker Hub licensing) including governance, cost/resource optimization, and support.
• Integrate platform workflows with enterprise systems such as ServiceNow CMDB and IdentityNow for auditable provisioning and access governance.
• Build and operationalize VM fleet patterns (image strategy, patching/maintenance, scaling, reliability) with automation and runbooks.
• Establish infrastructure guardrails (CI validation/testing, policy checks, drift detection) and drive adoption via templates and infra-testing standards.
• Provide certificate lifecycle automation and CA integrations (issuance, renewal, rotation) for platform components.
• Produce and maintain platform documentation, templates, release notes, and onboarding materials; run office hours and support motions to drive self-service adoption.
• Drive platform feedback loops, community building, and evangelism; translate signals (NPS/surveys) into roadmap inputs.
• Administer Copilot/agent enablement and MCP server catalog integrations with instructions/runbooks for safe, consistent usage.

Requirements

• 6+ years building and operating enterprise cloud/platform foundations: landing zones, shared services, and environment patterns.
• 4+ years hands-on infrastructure as code with Terraform, including reusable module design and multi-team consumption.
• Experience governing a Terraform module registry: versioning, reviews, documentation standards, and deprecation lifecycle.
• Experience administering Terraform Cloud: workspace patterns, policies/approvals, secure variables, and run workflows.
• Experience establishing environment-management patterns: env repos/modules and promotion models.
• Experience integrating secure secrets with Azure Key Vault (binding patterns, access models, rotation).
• Strong IAM background for Azure and tool IAM: RBAC, least privilege, managed identities, service principals, and governance integration.
• FinOps experience: tagging/labeling, budgets/alerts, and cost reporting/dashboards (Cloudability).
• Experience operating VM fleets: image strategy, patching/maintenance, scaling, and reliability.
• Experience integrating platform workflows with enterprise systems such as ServiceNow CMDB and IdentityNow.
• Experience with infrastructure guardrails: CI validation/testing, policy-as-code checks, and drift detection.
• Strong written and verbal communication skills for documentation, templates, and technical enablement.

Tech Stack

• Azure
• Cloud
• Docker
• ServiceNow
• Terraform
• Vault