Senior Platform Engineer (AKS / Azure / Service Mesh)

Why join us

Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system. 

What We Offer:

• Work closely with inspiring, supportive and engaged colleagues from more than 80 different countries. 
• Practice your talents in a highly professional international environment. 
• Join a learning and development environment with an emphasis on knowledge sharing and training.
• Competitive salary and comprehensive benefits.

Ways of working

Find your own optimal balance within our hybrid working model, where you can connect at the office 8 days a month and also benefit from remote working. 

Great Place to Work for All

We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, ...). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process. Our values guide how we work together and shape our future:

Division: Group Technology Services (GTS)

Role Summary

We are looking for a Senior Platform Engineer to lead the design, implementation, and evolution of our Kubernetes platform on Azure (AKS), with a strong focus on service mesh (Istio), platform engineering, and enterprise-scale standards.

You will work in a highly regulated financial environment, supporting critical business activities where security, stability, and compliance are paramount.

As we are not a pure IT product company, our environment includes legacy systems, complex processes, and cross-team dependencies. This requires an engineer who is pragmatic, patient, and capable of driving change iteratively, while maintaining strong engineering standards.

• Design and implement AKS landing zones, including network isolation, ingress/egress, and security
• Lead the Istio service mesh architecture and implementation
• Define and maintain platform standards (network policies, gateway patterns, security models)
• Contribute to platform automation (Terraform, GitOps, ArgoCD)
• Collaborate with architecture boards and stakeholders to drive technology adoption and alignment
• Provide technical leadership and guidance to application teams
• Deliver documentation, knowledge transfer sessions, and contribute to reusable implementation patterns
• Continuously improve platform capabilities while balancing innovation with operational stability

About the Squad

Join the “.Net Application Integration Services” squad, composed of a Product Owner, a Scrum Master, and a team of experienced developers.

The squad manages a diverse portfolio across on-premises and cloud environments, structured around three main areas:

• Euroclear Identity Propagation: Security Token Services for Web, API and Message based Applications
• Middleware & Technical Frameworks: .NET frameworks, IIS, Service Fabric, corporate NuGet-based bespoke frameworks (in C#), and messaging solutions (WebSphere MQ, Kafka), as well as specialized products
• Cloud & Container Platforms: Azure and OpenShift technologies including App Services, Function App, Event Grid, Logic Apps, Istio, Dapr, and Calico

The team also delivers Reference Applications to promote best practices and design patterns across the organization.

Working closely with developers, system administrators, and solution architects, the squad focuses on integration, troubleshooting, and optimization, ensuring high levels of availability, scalability, reliability, and security.

As part of our operational model, all team members participate in a structured on-call rotation (watch duty) to ensure continuous support.

Working Environment & Mindset

• Operate in a regulated environment where: 
  • Changes must be controlled, auditable, and secure
  • Reliability and resilience are critical
• Navigate a heterogeneous and evolving ecosystem: 
  • Mix of modern cloud-native and legacy systems
  • Multiple stakeholders with different maturity levels
• Adopt an iterative and pragmatic approach: 
  • Progressively improve the platform rather than aiming for perfection upfront
  • Balance best practices with real-world constraints
• Demonstrate:  
  • Creativity and problem-solving
  • Patience and persistence
  • Ability to influence without authority

• Strong hands-on experience with AKS and Azure networking
• Proven expertise in Istio (or similar service mesh)
• Experience working in Agile/Scrum environments
• Advanced experience with: 
  • Kubernetes
  • Helm
  • Network policies
  • Security (TLS, certificates, identity)
  • Multi-tenant and secure platform design
• Strong understanding of: 
  • GitOps (ArgoCD)
  • Infrastructure as Code (Terraform)

Nice to Have

• Experience with: 
  • OpenShift
  • Certificate / Trust Manager solutions
  • Azure App Service
  • Reference implementations / Design Patterns
• Understanding of: 
  • .NET application architecture and design patterns
  • Enterprise architecture governance 

The position might require an On-call/ Watch duty role.

It means that when you are planned to be On-call/Watch Duty, you are available and reachable to work outside standard working hours to perform interventions when needed.

These can be performed on site or remotely from home. All the required equipment will be provided.

 

Please note that this is a permanent position, and we do not offer freelance/contract arrangement for the role.

#LI-AK1