Sandbox Platform Engineer

Job summary

Delivers and operationalises a secure, automated Azure platform for temporary development, testing, proof-of-concept, and technology evaluation environments. The role builds reusable Terraform and Ansible automation, integrates identity and security controls, and implements environment isolation, lifecycle management, and cost governance. It also validates pilot use cases and prepares documentation, support procedures, and knowledge transfer for operational handover.

Qualifications

• Work independently within established architectural, security, and technology constraints.
• Drive agreed technical deliverables through to completion.
• Identify and resolve delivery blockers proactively and escalate dependencies when stakeholder input is needed.
• Communicate clearly with technical and non-technical stakeholders.
• Apply an automation-first approach with attention to security, governance, auditability, and operational supportability.

Responsibilities

• Implement Azure platform foundations and isolated sandbox environments.
• Translate the approved strategy and architecture into technical designs and deployable components.
• Develop reusable Terraform modules and Ansible playbooks in GitHub Enterprise Cloud.
• Automate environment provisioning, configuration, expiry, shutdown, reclamation, and deletion.
• Integrate Microsoft Entra ID, role-based access control, and privileged-access patterns.
• Apply Azure Policy, security guardrails, audit logging, monitoring, and secure secrets management.
• Configure network isolation, routing, DNS, firewall controls, and approved remote access.
• Implement tagging, ownership metadata, budgets, cost reporting, and idle-resource controls.
• Create standard Windows and Linux sandbox patterns and support pilot users.
• Produce documentation, user guidance, support runbooks, and complete knowledge transfer and handover.

Skills

Contract length

Relocation