Platform Engineer

Mission Overview:

We are seeking a Platform Engineer to join our consultancy mission at a client site, representing Keystone Solutions. In this role, you will be a key member of the Platform Team, responsible for enabling development, deployment, and operation of applications across the organization. You will design, build, and maintain the shared foundations — pipelines, infrastructure, and tooling — that development teams rely on to ship software faster, more securely, and more reliably.

Key Responsibilities:

Platform Engineering & Infrastructure

• Design, build, and maintain Azure Kubernetes Service (AKS) clusters - both private and public - including node pool configuration, networking, ingress, autoscaling, and confidential compute workloads.
• Manage and evolve the Azure cloud platform: subscriptions, resource groups, Key Vault, Azure Container Registry, Service Bus, Storage Accounts, and SQL databases.
• Operate and support OpenShift environments where applicable.
• Ensure platform security, reliability, and compliance with organizational standards (network policies, managed identities, TLS, RBAC).

CI/CD Pipeline Development & Maintenance

• Develop and maintain shared, reusable CI/CD pipeline templates (YAML) in Azure DevOps, consumed by all application repositories across the organization.
• Build and optimize multi-stage deployment pipelines covering build, test, package, and deploy for .NET 8 applications, including container image builds (Docker/ACR), database deployments (DACPAC/sqlpackage), and Service Bus provisioning.
• Author and maintain PowerShell Core 7+ modules and scripts that drive pipeline logic - configuration generation, deployment map parsing, secret retrieval, Terraform variable construction, and Helm-based deployments.
• Ensure pipelines enforce security, quality gates (SonarQube), and environment promotion controls (DEV → TST → VAL → Manual Gate → PRD).
• Standardize deployment patterns so all project teams follow consistent, auditable release workflows.

Infrastructure as Code (IaC)

• Design, author, and maintain Terraform modules for provisioning and configuring Azure resources: AKS workloads (via Helm provider), Keycloak identity clients, SQL users, managed identities, Key Vault HSM keys, and Service Bus RBAC.
• Automate provisioning, scaling, and lifecycle management of infrastructure resources using Terraform, Azure CLI, and PowerShell.
• Manage Terraform state (Azure Storage backend with AAD auth) and ensure safe, repeatable deployments across environments.

Repository & Azure DevOps Administration

• Administer the shared Common/devops repository and associated deployment configuration repositories.
• Support version control practices, branching strategy (GitFlow: DEV/MAIN/hotfix), and PR validation workflows.
• Manage Azure DevOps service connections, agent pools, variable groups, and environment approvals.

Collaboration & Enablement

• Serve as the bridge between infrastructure and application development teams, helping them integrate platform capabilities into their workflows.
• Provide guidance and support on platform standards, deployment map configuration, pipeline extension patterns, and troubleshooting.
• Write and maintain documentation (README, schema references, onboarding guides) for consuming teams.
• Review contributions to shared platform code for architectural consistency and backward compatibility.

Required Skills & Experience:

• Hands-on experience operating and configuring Azure Kubernetes Service — networking, ingress, node pools, autoscaling, confidential compute, Helm chart deployments.
• Strong understanding of CI/CD principles, GitFlow branching, environment promotion, and deployment automation.
• Familiarity with .NET 10 build toolchain (dotnet build), NuGet, solution/project structure, and containerizing .NET applications.
• Proficiency in PowerShell Core 7+ — writing modules (.psm1), classes, Pester 5+ tests, and robust scripting with proper error handling.
• Broad experience with Azure services: Key Vault, Container Registry, Service Bus, Storage Accounts, SQL Database, Managed Identities, RBAC.
• Understanding of cloud architecture principles — scalability, high availability, security, cost management.
• Experience with Azure DevOps (TFS) — YAML pipelines, extends templates, repositories, service connections, agent pools, artifacts.
• Ability to author and maintain multi-stage YAML pipeline templates with parameterization, conditions, and template composition.
• Experience writing and maintaining Terraform configurations — modules, providers (azurerm, helm, keycloak, mssql, kubernetes), state management, plan/apply workflows.
• Understanding of network concepts relevant to AKS and Azure — VNets, NSGs, private endpoints, DNS, ingress controllers, proxy configuration.
• Ability to reason about system architecture — separation of concerns, shared platform design, module boundaries, and extensibility.

Nice to Have:

• Experience with Keycloak or OpenID Connect identity management.
• Familiarity with Docker and container image build optimization.
• Knowledge of database deployment automation (DACPAC, sqlpackage).
• Experience with SonarQube or similar code quality tooling.
• Familiarity with confidential computing on Azure.
• Experience with OpenShift container platform.

At Keystone Solutions, we focus on dynamic projects that offer diverse challenges across various client environments. Our consultancy model emphasizes on-site work, turbo-charged learning, and a commitment to career growth. Being a

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

Duration: 10/08/2026 - 31/12/2026 5 months • (full time)

Skills required:

• .NET Development - Level: Confirmed - Most recent: Any time
• Active Directory - Windows Server Management - Level: Junior - Most recent: Any time
• API Integration & Messaging - Level: Junior - Most recent: Any time
• Azure DevOps - Level: Junior - Most recent: Any time
• Cloud (Azure) - Level: Confirmed - Most recent: Any time
• Database management - Level: Junior - Most recent: Any time
• DNS, HTTP/HTTPS, VPNs - Level: Junior - Most recent: Any time
• Docker / Kubernetes - Level: Junior - Most recent: Any time
• Dynatrace, ELK Stack, Prometheus, Grafana - Level: Junior - Most recent: Any time
• Identity & Access Management - Level: Junior - Most recent: Any time
• Nuget Package Management - Level: Confirmed - Most recent: Any time
• PowerShell scripting - Level: Junior - Most recent: Any time
• Terraform - Level: Confirmed - Most recent: Any time
• Visual studio - Level: Junior - Most recent: Any time

Language requirements:

Dutch
Level Active knowledge
English
Level Active knowledge
French
Level Active knowledge