T-Mobile Polska S.A.
T Hub - Azure Infrastructure & Platform Engineer
Senior hands-on Azure infrastructure & platform engineer at T-Mobile Polska's T Hub in Warsaw: designs and implements Azure Landing Zones, builds and automates Azure infrastructure and shared platform services (IaaS, networking, identity, monitoring) with IaC via PowerShell, Terraform and GitLab CI/CD, and supports Azure data platform integration including Microsoft Fabric.
- Compensation
- Not disclosed
- Location
- Warszawa
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Contract
- Experience
- Not specified
- Category
- Devops
- Posted
Skills
Must have
- Strong hands-on experience with Microsoft Azure architecture and infrastructure
- Azure Landing Zones and the Microsoft Cloud Adoption Framework
- Azure governance: Management Groups, subscriptions, RBAC, Azure Policy
- Azure IaaS services
- Windows Server administration in Azure
- Azure networking: VNets, DNS, routing, Azure Firewall, NSGs, Private Link, Private Endpoints
- Azure Monitor and Log Analytics
- Infrastructure as Code principles and implementation
- Git-based infrastructure workflows
- GitLab CI/CD
- PowerShell
- Azure CLI
- DevOps practices for cloud infrastructure
Nice to have
- Linux administration and Kubernetes/AKS
- Microsoft Fabric platform infrastructure and administration
- Terraform
- Azure Key Vault and Managed Identities
- Microsoft Defender for Cloud
- Azure cost management and FinOps practices
Full description
How to avoid professional compromises? Choose once and for all to
ENTER SUPERPOSITION
What tasks await you?
Azure Architecture & Landing Zones
- Assess the existing Azure environment, including subscriptions, networking, identity, security, governance, and operational processes.
- Design and implement Azure Landing Zones aligned with the Microsoft Cloud Adoption Framework and Azure Well-Architected Framework.
- Define and implement:
- Management Group and subscription structures
- Resource organization, tagging, and naming standards
- RBAC and access models
- Azure Policy and governance frameworks
- Network architecture
- Logging, monitoring, and operational standards
- Establish repeatable and automated patterns for onboarding new workloads and services.
Azure Infrastructure & Platform Engineering
Design, implement, automate, and operate Azure infrastructure and shared platform services, including:
- Azure IaaS services
- Windows Server workloads hosted on Azure Virtual Machines
- Azure networking:
- VNets and subnets
- Routing and DNS
- Network Security Groups (NSGs)
- Azure Firewall
- Private Link and Private Endpoints
- Storage and related Azure platform services
- Azure Monitor, Log Analytics, alerting, and diagnostics
- Identity, access management, and security controls
- Linux-based workloads and Azure Kubernetes Service (AKS), where required as part of the wider platform landscape
Cloud & Data Platform Integration
- Support the infrastructure and platform requirements of Microsoft Fabric and other Azure-based data services.
- Establish secure networking, identity, governance, and connectivity patterns for cloud data platforms.
- Collaborate with data engineering and analytics teams to integrate data platforms into the wider Azure architecture.
- Support platform-level capacity planning, monitoring, security, operational readiness, and cost management.
Infrastracture as Code & Automation
- Develop and maintain Infrastructure as Code for repeatable Azure deployments.
- Integrate Infrastructure as Code into GitLab CI/CD pipelines.