CloudOps Engineer

About Planet

Planet is a global provider of integrated technology and payments solutions for retail and hospitality customers.

We create great experiences for the millions of people who use our payments, software, and tax-free solutions every minute of every day.

Planet empowers its customers to deliver great customer experiences by combining payments and software in ways that drive greater loyalty, increase revenue and save time.

Founded over 35 years ago and with our headquarters in London, today we have more than 2,500 employees located across six continents serving our customers in more than 120 markets.

Role Overview

We are seeking a highly skilled Cloud Operations Engineer with deep expertise in Microsoft Azure networking to join our Cloud & Infrastructure Services team. The ideal candidate will operate, secure, troubleshoot, and continuously improve cloud and hybrid network services that support business-critical platforms.

This role combines strong cloud operations capability with advanced knowledge of network architecture and protocols. The successful candidate will take ownership of Azure connectivity and network security services, support hybrid connectivity with on-premises and other cloud environments, automate network deployment and configuration, and lead the diagnosis and resolution of complex connectivity and performance issues.

Previous experience working within regulated industries (e.g., payments, financial services, PCI-DSS, healthcare, or other compliance-driven environments) is highly desirable.

What you will do

• Operate, maintain, and improve highly available Azure and hybrid cloud network services.
• Design and support Azure hub-and-spoke and Virtual WAN architectures, virtual networks, subnets, peering, user-defined routes, NAT Gateway, Private Link, private endpoints, and service endpoints.
• Manage network security controls including Network Security Groups, Azure Firewall, Web Application Firewall, DDoS Protection, network segmentation, and controlled ingress and egress.
• Operate hybrid connectivity using ExpressRoute, site-to-site and point-to-site VPNs, BGP, and integration with on-premises routing and security platforms.
• Support Azure DNS, Private DNS, DNS forwarding and resolution across hybrid environments, and application delivery through Azure Load Balancer, Application Gateway, Front Door, and third-party appliances.
• Develop and maintain Infrastructure as Code using Terraform, applying peer review, testing, and controlled deployment practices to network changes.
• Monitor network health, flow, latency, availability, capacity, and security signals using Azure Monitor, Network Watcher, logs, and observability platforms.
• Troubleshoot complex issues across DNS, routing, firewalls, load balancing, TLS, connectivity, and application network paths.
• Lead or support incident response, root cause analysis, problem management, maintenance, and service restoration for production infrastructure.
• Collaborate with security, platform engineering, application, and enterprise network teams to deliver secure and reliable connectivity.
• Maintain network documentation, diagrams, operational procedures, standards, and runbooks, and contribute to disaster recovery and capacity planning.

Who you are

• Extensive hands-on experience operating Microsoft Azure infrastructure, with advanced expertise in Azure networking.
• Strong knowledge of TCP/IP, IPv4 addressing and subnetting, DNS, DHCP, NAT, routing, BGP, VPNs, proxies, load balancing, TLS, and network security principles.
• Deep experience with Azure Virtual Network, peering, routing, NSGs, Azure Firewall, Private Link, Private DNS, ExpressRoute, VPN Gateway, Load Balancer, Application Gateway, Front Door, and Network Watcher.
• Proven ability to troubleshoot end-to-end connectivity and performance across cloud, on-premises, and hybrid environments using packet captures, flow logs, route analysis, DNS tools, and platform telemetry.
• Experience with enterprise firewalls, network virtual appliances, web application firewalls, and traffic management technologies.
• Experience using Terraform for repeatable, controlled Infrastructure as Code deployments.
• Experience operating production services, responding to incidents, managing changes, and completing root cause analysis.
• Scripting and automation experience using PowerShell, Azure CLI, Bash, Python, or similar technologies.
• Clear communication skills and the ability to produce accurate technical documentation and explain complex network issues to technical stakeholders.

Nice to Have

• Experience with Fortinet, F5, or comparable enterprise firewall and application delivery platforms.
• Experience with Azure Virtual WAN, Azure Route Server, multi-region connectivity, and multi-cloud networking.
• Knowledge of Zero Trust networking, PCI-DSS controls, and network segmentation in regulated environments.
• Experience with monitoring and observability platforms and analysis of network and security telemetry.

Preferred Experience

• Experience working in regulated environments such as payments, financial services, banking, healthcare, or other compliance-driven industries.
• Relevant certifications such as Azure Network Engineer Associate, Azure Administrator Associate, Azure Solutions Architect Expert, or recognized enterprise networking certifications.

On-Call Requirements

This position supports business-critical production infrastructure and network services. Participation in an on-call rotation is expected, and candidates must be willing to provide out-of-hours support for connectivity incidents, security events, maintenance activities, and service restoration.

Why Planet:

Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.

Come and grow your career in the most exciting, fast paced technology market, with a business that delivers feel-good connected commerce. 

We would love to hear from you – Apply now.

At Planet, we embrace a hybrid work model, with three days a week in the office.
 

Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.