Platform Engineer – Belgium; Hybrid

Platform Engineer — NIHDI IT Platform Team

The Platform Engineer is a key member of the Platform Team, responsible for enabling development, deployment, and operation of applications across the organization. You will design, build, and maintain the shared foundations — pipelines, infrastructure, and tooling — that development teams rely on to ship software faster, more securely, and more reliably.

You will own and evolve a shared Azure Dev Ops pipeline template library consumed by all application teams, manage Azure Kubernetes Service (AKS) clusters (including confidential compute), and automate infrastructure provisioning using Infrastructure as Code.

• Design, build, and maintain Azure Kubernetes Service (AKS) clusters — both private and public — including node pool configuration, networking, ingress, autoscaling, and confidential compute workloads.
• Manage and evolve the Azure cloud platform: subscriptions, resource groups, Key Vault, Azure Container Registry, Service Bus, Storage Accounts, and SQL databases.
• Operate and support Open Shift environments where applicable.
• Ensure platform security, reliability, and compliance with organizational standards (network policies, managed identities, TLS, RBAC).
• Develop and maintain shared, reusable CI/CD pipeline templates (YAML) in Azure Dev Ops, consumed by all application repositories across the organization.
• Build and optimize multi-stage deployment pipelines covering build, test, package, and deploy for .NET 8 applications, including container image builds (Docker/ACR), database deployments (DACPAC/sqlpackage), and Service Bus provisioning.
• Author and maintain Power Shell Core 7+ modules and scripts that drive pipeline logic — configuration generation, deployment map parsing, secret retrieval, Terraform variable construction, and Helm-based deployments.
• Ensure pipelines enforce security, quality gates (Sonar Qube), and environment promotion controls (DEV → TST → VAL → Manual Gate → PRD).
• Standardize deployment patterns so all project teams follow consistent, auditable release workflows.
• Design, author, and maintain Terraform modules for provisioning and configuring Azure resources: AKS workloads (via Helm provider), Keycloak identity clients, SQL users, managed identities, Key Vault HSM keys, and Service Bus RBAC.
• Automate provisioning, scaling, and lifecycle management of infrastructure resources using Terraform, Azure CLI, and Power Shell.
• Manage Terraform state (Azure Storage backend with AAD auth) and ensure safe, repeatable deployments across environments.
• Administer the shared Common/devops repository and associated deployment configuration repositories. Support version control practices, branching strategy (Git Flow: DEV/MAIN/hotfix), and PR validation workflows. Manage Azure Dev Ops service connections, agent pools, variable groups, and environment approvals.
• Serve as the bridge between infrastructure and application development teams, helping them integrate platform capabilities into their workflows.
• Provide guidance and support on platform standards, deployment map configuration, pipeline extension patterns, and troubleshooting.
• Write and maintain documentation (README, schema references, onboarding guides) for consuming teams.
• Review contributions to shared platform code for architectural consistency and backward compatibility.

• AKS:
  Hands‑on experience operating and configuring Azure Kubernetes Service — networking, ingress, node pools, autoscaling, confidential compute, Helm chart deployments.
• Dev Ops practices:
  Strong understanding of CI/CD principles, Git Flow branching, environment promotion, and deployment automation.
• .NET:
  Familiarity with .NET 10 build toolchain (dotnet build), NuGet, solution/