platform engineer Landing Zone

Nordea operates as a major Nordic bank whose technology organisation supports business strategy, customer services, security, compliance, and reliable banking operations. Its Cloud Platform Team owns and evolves enterprise cloud platforms that support application teams throughout their cloud journey.

• Build and maintain Landing Zone infrastructure as code with Terraform, manage configuration with Ansible, and write Python and Bash automation for provisioning and ongoing operations;
• Build central, reusable Landing Zone solutions for application teams;
• Design and run CI/CD pipelines for Landing Zone changes, maintain pipeline health, and set up automated testing for platform components;
• Contribute to a genuine DevOps way of working;
• Raise and review pull requests and contribute to architecture documentation;
• Identify automation gaps and eliminate repeatable manual work;
• Design the networking foundation across subscription and management group structures, including VNets, subnets, network security groups, route tables, hub-and-spoke topology, and workload segmentation;
• Build and operate hybrid connectivity between Azure and on-premises data centres using ExpressRoute and VPN Gateway;
• Apply zero trust principles using Entra ID, Azure RBAC, Azure Policy, and network segmentation;
• Set governance guardrails and best practices based on Azure Landing Zones, the Cloud Adoption Framework, management group hierarchy, and policy-as-code;
• Build platform observability and monitoring dashboards;
• Lead P1/P2 incident response, drive resolution, perform root cause analysis, coordinate across teams, and improve procedures.

• 5+ Years of hands-on cloud engineering experience with strong, current Azure experience at enterprise scale;
• Practical experience designing and running an Azure Landing Zone, ideally following the Cloud Adoption Framework / Enterprise-Scale approach;
• Strong command of Terraform for infrastructure as code;
• Solid Ansible skills for configuration and automation;
• Good programming ability in Python and Bash;
• Experience building CI/CD pipelines;
• Strong understanding of Azure networking, including VNet and hub-and-spoke design, ExpressRoute, on-premises connectivity, and zero trust access design;
• Nice to have: A degree in Computer Science, Information Technology, or a related field, Azure Solutions Architect Expert or DevOps Engineer Expert certification, Docker and Kubernetes experience including AKS, familiarity with security frameworks and compliance standards, monitoring and observability tooling experience with Azure Monitor, Prometheus, Grafana, or ELK, ITIL or similar service management background, comfort working in an agile setup.

• Hybrid working model;
• A culture that fosters performance and growth in one of the largest Nordic banks;
• Opportunities to evolve, develop, and learn from colleagues with diverse backgrounds;
• Only for candidates in Finland: A security clearance will be performed for the person selected for this position;
• Only for candidates in Poland: Please include permit for processing personal data in CV as following: In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp;
• Job ID: 5906.