Azure Cloud Engineer, Data Mesh and AI Platforms team

Job Description

Welcome to Group Technology, where we engineer solutions that support Nordea's transformation and enable the Customer Vision and Business Strategy. As part of Nordea's 2030 strategic direction, we are modernizing our technology and data estate while accelerating the adoption of AI-enabled capabilities across the bank. We are looking for experienced Azure Cloud Engineers to join our Data Mesh and AI Platforms team. You will help deliver secure, automated, and reusable Azure infrastructure and platform capabilities in close collaboration with engineers, architects, product owners, and governance stakeholders. This is a hands-on engineering role. You will design, build, test, and improve Azure platform patterns, automation, and operational controls that enable internal teams to provision and operate modern data and AI solutions safely in a regulated banking environment. About our team Welcome to the Data Mesh and AI Platforms team. We are building the next generation of cloud-native data and AI platform capabilities for Nordea, with a strong focus on secure infrastructure, automated provisioning, identity integration, reusable engineering patterns, and strong operational controls. You will work closely with product owners, engineers, architects, cybersecurity, data governance, and cloud platform teams. The role requires strong practical engineering skills, a delivery mindset, and the ability to turn platform architecture and agreed standards into high-quality, reusable implementation. This is a full-time permanent position with a hybrid working arrangement—up to 40% remote work is possible, but full remote work is not allowed. We expect to hire in one of these cities: Gdańsk or Gdynia, Poland; Copenhagen, Denmark; or Helsinki, Finland. Your main responsibilities will include, but are not limited to:Build, configure and improve Azure infrastructure foundations using Terraform and automated delivery pipelines.Implement reusable infrastructure-as-code modules for subscriptions, resource groups, networking, Azure RBAC, managed identities, secrets, logging, monitoring, and policy guardrails.Support secure Azure landing-zone patterns, including management-group and subscription structure, hub-and-spoke networking, virtual networks, private endpoints, Azure Firewall, network security groups, and environment isolation.Create and maintain CI/CD pipelines for provisioning, validation, testing, deployment, and lifecycle management of platform components.Implement identity and access patterns using Microsoft Entra ID, federation, managed identities, least-privilege Azure RBAC, privileged access controls, and secure access workflows.Support Azure data and AI platform enablement, including platform patterns for Azure AI Foundry, Azure Machine Learning, Microsoft Fabric, Azure Data Factory, Event Hubs, Azure Storage, Azure Functions, and AKS.Build observability and operational controls using Azure Monitor, Log Analytics, Application Insights, alerting, dashboards, runbooks, and production-readiness checks.Translate platform priorities and agreed engineering standards into well-structured backlog items, engineering tasks, implementation plans, and technical documentation.Collaborate with cybersecurity, governance and architecture teams to ensure platform capabilities meet security, compliance, and operational expectations.Contribute to code reviews, pattern reviews, testing practices, and continuous improvement of the Azure platform engineering experience. Key skills required for this role:Azure infrastructure: Hands-on experience with Azure subscriptions, resource groups, virtual networks, hub-and-spoke networking, private endpoints, Azure Firewall, network security groups, and environment separation.Terraform and IaC: Strong Terraform skills, including module usage, reusable patterns, state handling, variables, outputs, validation, and promotion across environments.Identity and security: Practical knowledge of Microsoft Entra ID, Azure RBAC, least privilege, managed identities, federation, Key Vault, key management, and secure access patterns.CI/CD and automation: Experience building or operating Azure DevOps or equivalent pipelines for infrastructure provisioning, validation, deployment, policy checks, and release management.Data and AI platform services: Working knowledge of services such as Azure AI Foundry, Azure Machine Learning, Microsoft Fabric, Azure Data Factory, Event Hubs, Azure Storage, Azure Functions, or AKS.Observability and operations: Experience with Azure Monitor, Log Analytics, Application Insights, alerting, dashboards, runbooks, incident response, and production-readiness practices.Engineering collaboration: Ability to work in a team, write clear documentation, participate in reviews and communicate technical decisions clearly. Who you are This is the right role for you if you:Are hands-on: You enjoy building infrastructure, automation, and platform capabilities that are robust, reusable, and