Platform Engineer

Job Title: DevOps/Cloud Platform Engineer 

Location: Remote/WFH and first week onsite at the nearest client office

Duration: 3 months+ contract

 

Description:

DevOps / Cloud Platform Engineer with Identity integration Experience (Azure, Security)

 

Overview:

Seeking a hands-on DevOps / Cloud Platform Engineer to lead the secure deployment and integration of platform automation capabilities across Azure and AWS.

The engineer will establish source-control and CI/CD practices, package and deploy APIs and web applications, support infrastructure automation, and integrate the solution with the client's cloud identity and security environment. The role requires meaningful experience with Microsoft Entra ID, Azure API Management, application registrations, access tokens, workload identities, secrets management, and role-based access control.

This is not simply a release-management role. The engineer must understand how application components authenticate, how user identity is passed between the portal and APIs, and how PAM determines whether a user is authorized to perform a privileged action.

 

Key Responsibilities:

DevOps and deployment automation:

• Establish and maintain GitHub-based source-control, branching, code-review, and merge processes.
• Design and implement CI/CD pipelines for PAM APIs, the PAM front end, portal components, and supporting cloud configuration.
• Package application code, infrastructure configuration, build scripts, dependencies, and function layers for deployment.
• Develop and maintain infrastructure-as-code configurations using Terraform.
• Support deployment of Python APIs, React applications, Azure Functions or AWS Lambda components, and portal modules.
• Configure separate development, testing, and production deployment workflows.
• Implement automated build, validation, security-checking, approval, and deployment steps.
• Support logging, monitoring, troubleshooting, rollback, and release documentation.
• Work with the client's technical resources to deploy export-eligible code into restricted environments.

 

Azure identity and security integration:

• Integrate applications and APIs with Microsoft Entra ID.
• Create or configure application registrations, enterprise applications, service principals, managed identities, and associated permissions.
• Configure authentication flows for browser-based applications, APIs, and system-to-system integrations.
• Configure Azure API Management to receive and validate Microsoft Entra ID-issued JWT access tokens.
• Ensure identity and authorization claims are passed correctly from One Portal and the PAM front end to the PAM APIs.
• Integrate PAM APIs with the custom authorizer and ACL data store used to approve or deny requested actions.
• Configure API scopes, application roles, group claims, permission consent, and role-based access controls where required.
• Configure secure use of credentials, certificates, keys, tokens, and secrets through Azure Key Vault or the designated the client's secrets-management capability.
• Apply least-privilege access principles to users, applications, service identities, deployment pipelines, and cloud resources.
• Troubleshoot token validation, claims, API permissions, access denials, expired credentials, and application-identity issues.
• Coordinate with the client's identity, cybersecurity, cloud, and application teams to confirm security requirements and obtain approvals.

 

Platform and portal integration:

• Support deployment and integration of the PAM front end into One Portal using React Module Federation.
• Support common SSO and authentication across One Portal and the agreed existing portal entry points.
• Configure application routing, environment variables, API endpoints, certificates, secrets, and deployment settings.
• Support deployment of the PAM ACL administration interface into the client's application framework.
• Establish the technical deployment pattern for independently developed portal components.
• Ensure that user identity remains consistent as a user moves from One Portal to the PAM front end and then invokes the PAM APIs.

 

Cloud and infrastructure support:

• Support Azure and AWS deployment requirements associated with PAM and platform automation.
• Configure Azure API Management, Azure Functions, Key Vault, storage, logging, and identity integrations where applicable.
• Support AWS Lambda, IAM, storage, networking, and deployment configuration where PAM remains hosted in AWS.
• Develop Terraform automation that uses the client's existing cloud networking, security, and policy configurations.
• Support Databricks workspace endpoint configuration and integration across Azure Commercial and AWS.
• Follow the client's requirements for encryption, certificates, network connectivity, access restrictions, and technical-data handling.

 

 

 

Best Regards,

-------

David Roy | #LI-DR1  Accounts Manager – US Staffing | Charter Global Inc. |