Platform Engineer - Public Sector

Context

Our client — a major Belgian public-sector institution — is reinforcing its Platform Team. The team owns the shared foundations (pipelines, infrastructure, tooling) that every application team across the organization relies on to ship software faster, more securely, and more reliably.

As a Platform Engineer, you will own and evolve a shared Azure DevOps pipeline template library, manage Azure Kubernetes Service (AKS) clusters — including confidential compute — and automate infrastructure provisioning with Infrastructure as Code.

Missions

• Design, build, and operate AKS clusters (private and public) — node pools, networking, ingress, autoscaling, confidential compute workloads.
• Run and evolve the Azure platform: subscriptions, resource groups, Key Vault, Container Registry, Service Bus, Storage Accounts, SQL databases.
• Operate and support OpenShift environments where applicable.
• Enforce platform security, reliability, and compliance — network policies, managed identities, TLS, RBAC.
• Develop and maintain shared, reusable Azure DevOps pipeline templates (YAML) consumed by every application repository.
• Build multi-stage pipelines for .NET 8 — build, test, package, deploy — including container builds (Docker/ACR), DACPAC database deployments, and Service Bus provisioning.
• Author and maintain PowerShell Core 7+ modules driving pipeline logic: configuration generation, deployment-map parsing, secret retrieval, Terraform variable construction, Helm-based deployments.
• Enforce quality gates (SonarQube) and environment promotion controls (DEV → TST → VAL → Manual Gate → PRD).
• Design and maintain Terraform modules for Azure resources: AKS workloads (Helm provider), Keycloak identity clients, SQL users, managed identities, Key Vault HSM keys, Service Bus RBAC.
• Manage Terraform state (Azure Storage backend with AAD auth) and ensure safe, repeatable deployments across environments.
• Administer the shared Common/devops repository and associated deployment-config repositories.
• Support GitFlow branching (DEV/MAIN/hotfix), PR validation, service connections, agent pools, variable groups, environment approvals.
• Act as the bridge between infrastructure and application teams.
• Document standards, schema references, onboarding guides — and review contributions to shared platform code for architectural consistency.

Tools & Environment

• Azure Kubernetes Service (AKS) — node pools, networking, ingress, autoscaling, confidential compute workloads
• Azure platform services: subscriptions, resource groups, Key Vault, Container Registry, Service Bus, Storage Accounts, SQL databases
• OpenShift container platform
• Azure DevOps — YAML pipelines, templates, repositories, service connections, agent pools, artifacts
• PowerShell Core 7+ — modules (.psm1), classes, Pester 5+ tests
• Terraform — modules, providers (azurerm, helm, keycloak, mssql, kubernetes), state management
• .NET 8 build toolchain, NuGet, containerization (Docker/ACR)
• SonarQube for quality gates
• Networking: VNets, NSGs, private endpoints, DNS, ingress controllers, proxy configuration
• GitFlow branching model

Working Conditions

• Client: Public sector — Belgian institution
• Location: Brussels · 50% onsite
• Duration: 1 year, renewable
• Daily rate: €650 – €750
• Languages: English, French, Dutch (active knowledge required)

About Futurwork

A European tech ecosystem combining Consulting, Academy, and Startup Studio. We build long-term partnerships between consultants, clients, and startups — with a focus on Cybersecurity and Cloud / IT Infrastructure. Independent, transparent, and operating across Belgium and France.

1. Hands-on experience with AKS — networking, ingress, node pools, autoscaling, confidential compute, Helm chart deployments
2. Strong knowledge of DevOps principles, CI/CD, GitFlow branching, environment promotion, deployment automation
3. Familiarity with the .NET 8/10 build toolchain, NuGet, solution structure, containerization
4. PowerShell Core 7+ — modules (.psm1), classes, Pester 5+ tests, robust scripting with proper error handling
5. Broad experience with Azure services: Key Vault, Container Registry, Service Bus, Storage Accounts, SQL Database, Managed Identities, RBAC
6. Experience with Azure DevOps: YAML pipelines, templates, repositories, service connections, agent pools, artifacts
7. Terraform — modules, providers (azurerm, helm, keycloak, mssql, kubernetes), state management, plan/apply workflows
8. Networking knowledge — VNets, NSGs, private endpoints, DNS, ingress controllers, proxy configuration
9. Active knowledge of languages — English, French, Dutch