The Azure Solutions Engineer will work closely with IT Platform Services, Cybersecurity, Enterprise Architecture, IT Application Services, Network, and Data teams to develop a scalable, secure, and well-governed Azure environment supporting possibly both Azure Cloud and Azure Local deployments.
Responsibilities
Platform Engineering
- Design, build, and maintain CI/CD pipelines (Azure DevOps and/or GitHub Actions) for infrastructure-as-code and application deployments.
- Implement Infrastructure-as-Code using Bicep and/or Terraform, with modular, reusable templates aligned to landing zone standards.
- Build and maintain deployment pipelines for containerized workloads (AKS, Azure Container Apps) and serverless components (Azure Functions, Logic Apps).
- Establish pipeline security practices: secret scanning, dependency scanning, policy-as-code (Azure Policy / OPA), and compliance gates.
- Support platform observability: monitoring, alerting, and logging pipeline for deployed workloads (Azure Monitor, Log Analytics, Application Insights).
Platform Architecture
- Architecture: Act as technical authority for Azure platform decisions — IaaS, PaaS, networking, identity, security posture. Own and evolve the Azure landing zone architecture following the Cloud Adoption Framework (CAF), including hub-and-spoke network topology and management group hierarchy with Architecture team.
- Governance and Standards: Establish Azure governance, policies, standards, ADRs, and enterprise cloud controls while driving compliance, architecture governance, and cloud capability maturity with Architecture & Digital Business Transformation teams.
- Networking and Infrastructure: Design and govern secure Azure networking, hybrid connectivity, private networking, and infrastructure architecture across cloud and on-premises environments. Define and maintain standards for network segmentation, private endpoints, hybrid/on-prem connectivity, internet egress/ingress, and key/secrets management.
- Security Architecture: Establish Azure security baselines, Zero Trust architectures, security controls, and governance to support compliance and secure-by-design principles with Cybersecurity team.
- Cloud Engineering Standards: Define Infrastructure-as-Code, automation, reusable deployment patterns, and cloud engineering standards using tools such as Terraform and Bicep.
- Data & Integration: Provide architectural guidance for Microsoft Fabric, event-driven integration, API management, and governed deployment of data and integration platforms with Digital Business Transformation team.
- Cost Management: Monitor cloud resource utilization, implementing FinOps strategies to optimize infrastructure costs without compromising performance or reliability with Digital Business Transformation team.
- Collaboration and Advisory: Act as the Azure technical authority, providing architectural leadership, mentoring, and guidance to enterprise, application, data, DevOps, and security teams.
Qualifications
- Bachelor’s degree in Computer Engineering or Software Engineering in a related technical field or equivalent practical experience.
- Comfortable operating both as an architect (option analysis, trade-offs, governance) and as an engineer (writing and maintaining pipeline/IaC code directly).
- 6+ years of hands-on experience in Microsoft Azure, with at least 3+ years of experience designing enterprise-grade solutions on Microsoft Azure.
- Experience with Azure API Management.
- Proven experience designing and operating an Azure landing zone at enterprise scale (CAF/ALZ or equivalent).
- Strong hands-on engineering skills: IaC (Bicep or Terraform), scripting (PowerShell and/or Bash), and CI/CD tooling (Azure DevOps Pipelines or GitHub Actions).
- Solid understanding of Azure networking (hub-and-spoke, VNet peering, private endpoints, ExpressRoute/VPN), identity (Entra ID, RBAC, managed identities), and security fundamentals.
- Working knowledge of containerization and orchestration (Docker, AKS or Container Apps).
- Experience producing architecture documentation and decision records, and presenting to a review board or comparable governance body.
- Familiarity with integration patterns (event streaming, API management)
Preferred Qualifications
- Microsoft Certified:
- Azure Solutions Architect Expert (AZ-305),
- Azure DevOps Engineer Expert (AZ-400), or
- Azure Data Engineer Associate (DP-203)
- Experience with architecture frameworks (TOGAF preferred)
- Experience with hybrid and multi-cloud environments.
- Familiarity with NIST, ISO 27001, CIS Benchmarks, or similar security and governance frameworks.
- Experience with data (data integration and IoT) focused cloud environments.
- Experience with Microsoft Fabric and Data Vault.
- Familiarity with data platform concepts (data lakehouse / medallion architecture)
- Exposure to OT/IoT ingestion patterns (e.g., Event Hubs-based telemetry pipelines)
- Experience working in a regulated or infrastructure-heavy industry (datacenter, telco, financial services, utilities).
- Familiarity with ServiceNow or similar ITSM/CMDB platforms and their boundary with cloud infrastructure
- Experience with policy-as-code and compliance automation (Azure Policy, Defender for Cloud)
Benefits
- Be part of an epic team that prioritizes your personal and professional growth
- HMO insurance coverage starts from the 1st working day.
- Vacation and sick leave credits (pro-rated) start from the 1st working day.
- Company-issued laptop included to ensure smooth and efficient work experience
- Earn rewards with our Employee Referral Program
- Enjoy flexible working time that align with the client’s core hours
- Flexible work location, several office locations across Metro Manila and work-from-home (WFH)
- Access to free training, certification programs, and fun community/social activities
- Collaborate in an international, multicultural working environment