Azure Lead Engineer

Location: Remote from Spain (an indefinite Spanish employment contract)
The Azure Lead Engineer owns the technical direction and engineering quality of Cloud Hub's enterprise Azure platform. This is a hands-on leadership role spanning Azure Landing Zones, governance, security, networking, automation, reliability and cost management. The role works across Engineering, Architecture, Security, Product and Operations to provide a secure, scalable and governed Azure platform for approved and documented exception use cases in alignment with enterprise architecture standards.
About the Client
Our client is a large global enterprise operating across multiple markets, with a complex technology landscape and a strong focus on digital transformation and innovation. The organization is actively investing in modern cloud, data, and AI capabilities to enable scalable, secure, and highly automated solutions across its business.
Requirements:
Required Expertise
6+ years in cloud infrastructure, platform engineering, DevOps or SRE, including at least three years of hands-on Azure experience.
Proven design and operation of enterprise, multi-subscription Azure platforms and Landing Zones.
Strong knowledge of management groups, Azure Policy, Microsoft Entra ID, RBAC/PIM, Azure Monitor, Log Analytics and cost controls.
Strong Azure networking experience: hub-and-spoke or Virtual WAN, VNets, routing, DNS, NSGs, Private Endpoints, firewalls and ExpressRoute/VPN.
Production experience with IaC tools, Git-based delivery, CI/CD and scripting such as Python or PowerShell.
Demonstrated technical leadership, mentoring, stakeholder influence and delivery in a global enterprise environment.
At least B2 level of English.
Preferred Qualifications
Experience with multi-cloud environments, platform-product operating models, SRE practices and organisational change.
Responsibilities:
Platform strategy and technical leadership
Own the Azure technical roadmap, reference architectures, standards and reusable implementation patterns.
Lead architecture and design reviews; make pragmatic technical decisions and communicate trade-offs clearly.
Mentor engineers, strengthen peer review and reduce dependency on individual subject-matter experts.
Landing Zones, governance and security
Design, evolve and operate enterprise Azure Landing Zones, including management groups, subscriptions, identity, policy, shared services and workload guardrails.
Implement policy-driven governance, RBAC, privileged access, tagging, compliance monitoring and security-by-design controls.
Partner with Security, Architecture and Compliance teams to remediate risks and maintain audit-ready evidence.
Automation and platform engineering
Drive Infrastructure as Code and automated lifecycle management using approved enterprise tooling, Git and CI/CD pipelines.
Build self-service subscription and platform capabilities with clear product interfaces, documentation and operational ownership.
Control configuration drift, improve repeatability and minimise manual operational work.
Reliability, operations and optimization
Establish observability, operational readiness, backup/recovery and incident-management standards.
Lead complex troubleshooting, root-cause analysis and engineering improvements arising from incidents and problems.
Optimise resilience, performance and cost through capacity management, FinOps practices and measurable service outcomes.
Delivery and stakeholder leadership
Translate strategy into a prioritised backlog; identify dependencies, risks, owners and escalation paths.
Coordinate delivery across squads and stakeholders while maintaining architecture, security and engineering quality.
Represent Cloud Hub in Azure decisions and explain technical recommendations to both engineering and business audiences.
#J-*****-Ljbffr