Azure Platform Engineer – EDM Project

Day-to-day focus on the EDM cloud platform

Techcarrot is seeking an Azure Platform Engineer to staff an EDM project, onsite in Dubai, AE. The role is full-time and centered on building and running a robust Azure data platform with strong networking and security foundations. The right candidate will have a proven track record in complex cloud environments and enjoy turning architecture into reliable, scalable operations.

The work blends cloud data services with enterprise-grade networking. You’ll help design and maintain hub-and-spoke patterns, ensure connectivity through centralized firewall environments, and support shared services networking. You’ll also be hands-on with the integration points that keep data platforms connected to applications, governance tools, and security controls. If you like mapping out how data and services travel across a secure, well-governed network, this role will feel natural.

What you’ll bring to the project

A single section below captures the must-have requirements and the nice-to-haves. The must-have list is a blend of networking, data services, DevOps, and platform governance that aligns with the EDM project’s needs.

• Proficiency in designing and operating virtual networks in a hub-spoke layout, including VNet peering and route tables (UDR).
• Hands-on expertise configuring NSG rules, Azure Firewall setups, Private DNS Zones, Private Endpoints, and Service Endpoints to secure and segment traffic.
• Strong background in enterprise networking and cloud security, with experience managing connectivity through centralized firewall environments and shared services networks.
• Administrative experience across Azure Data Services, including Databricks Platform and governance components like Unity Catalog, cluster policies, secret scopes, access control, and monitoring.
• Hands-on work with Azure Data Services such as Data Factory, Synapse Analytics, Event Hub, Cosmos DB, ADLS Gen2, and Azure Database for PostgreSQL.
• DevOps and CI/CD fluency using Azure DevOps and GitHub (including Enterprise and related pipelines, release management, and automation).
• Experience at the edge and API layer, including Azure Front Door, Application Gateway (WAF), and API Management, with knowledge of API routing, TLS/SSL, DNS, and private connectivity to back-end services.
• Working knowledge of the required architecture: Front Door → Application Gateway → APIM → AKS, plus public ingress with private back-end services and path-based routing.
• Hands-on familiarity with AKS administration, networking, ingress controllers, private clusters, node pools, autoscaling, Kubernetes security, secrets management, and container networking.
• Understanding of internal LoadBalancer services, private endpoint exposure, publishing back-end APIs through APIM, health endpoints, and Kubernetes troubleshooting.
• A governance and operations mindset covering cost management, tagging, backup and disaster recovery, high availability, incident and problem management, and production support.

Nice-to-have certifications can help signal readiness for the role, but aren’t listed as mandatory for candidacy.

• AZ-104 Azure Administrator
• AZ-305 Azure Solutions Architect
• AZ-400 Azure DevOps Engineer

Pay, benefits and practical details

The role is full-time and onsite in Dubai, AE. Details about salary, benefits or specific schedule aren’t disclosed in the listing.

Tips to help you stand out for this project

Put your strongest Azure Data Platform experience first on your resume, especially if you’ve spent many years in enterprise hub-spoke environments and Landing Zones. Lead with how many years you’ve worked in Azure Data Platform and spotlight your experience with hub-spoke design, VNets, and centralized firewall patterns.

Demonstrate your must-have skills with concrete examples. Describe a project where you designed hub VNets, implemented VNet peering, configured UDRs, and set up NSGs and an Azure Firewall to secure multi-service workloads. Mention how you validated routing and resolved connectivity issues across shared services networks.

Be ready to talk through your Databricks administration and data services work. Explain how you managed Unity Catalog, cluster policies, secret scopes, and access controls, and how you integrated Databricks with data pipelines (ADF or Synapse) in a secure, production setting.

Prepare to discuss edge and API-layer topics and your approach to private connectivity. Expect to cover how you would route traffic with Front Door, Application Gateway, and APIM, and how you’d handle health probes, private endpoints, and private back-end exposure in a real EDM project. A thoughtful question about the team’s approach to private networking and governance is a smart closer.