Platform Engineer - Public Sector - Freelance

Daily rate: €620 – €720

Context

Our client — a major Belgian public-sector institution — is reinforcing its Platform Team. The team owns the shared foundations (pipelines, infrastructure, tooling) that every application team across the organization relies on to ship software faster, more securely, and more reliably.

As a Platform Engineer, you will own and evolve a shared Azure DevOps pipeline template library, manage Azure Kubernetes Service (AKS) clusters — including confidential compute — and automate infrastructure provisioning with Infrastructure as Code.

Missions

• Design, build, and operate AKS clusters (private and public) — node pools, networking, ingress, autoscaling, confidential compute workloads.
• Run and evolve the Azure platform: subscriptions, resource groups, Key Vault, Container Registry, Service Bus, Storage Accounts, SQL databases.
• Operate and support OpenShift environments where applicable.
• Enforce platform security, reliability, and compliance — network policies, managed identities, TLS, RBAC.
• Develop and maintain shared, reusable Azure DevOps pipeline templates (YAML) consumed by every application repository.
• Build multi-stage pipelines for .NET 8 — build, test, package, deploy — including container builds (Docker/ACR), DACPAC database deployments, and Service Bus provisioning.
• Author and maintain PowerShell Core 7+ modules driving pipeline logic: configuration generation, deployment-map parsing, secret retrieval, Terraform variable construction, Helm-based deployments.
• Enforce quality gates (SonarQube) and environment promotion controls (DEV → TST → VAL → Manual Gate → PRD).
• Design and maintain Terraform modules for Azure resources: AKS workloads (Helm provider), Keycloak identity clients, SQL users, managed identities, Key Vault HSM keys, Service Bus RBAC.
• Manage Terraform state (Azure Storage backend with AAD auth) and ensure safe, repeatable deployments across environments.
• Administer the shared Common/devops repository and associated deployment-config repositories.
• Support GitFlow branching (DEV/MAIN/hotfix), PR validation, service connections, agent pools, variable groups, environment approvals.
• Act as the bridge between infrastructure and application teams.
• Document standards, schema references, onboarding guides — and review contributions to shared platform code for architectural consistency.

Tools & Environment

• Azure Kubernetes Service (AKS) — node pools, networking, ingress, autoscaling, confidential compute workloads
• Azure platform services: subscriptions, resource groups, Key Vault, Container Registry, Service Bus, Storage Accounts, SQL databases
• OpenShift container platform
• Azure DevOps — YAML pipelines, templates, repositories, service connections, agent pools, artifacts
• PowerShell Core 7+ — modules (.psm1), classes, Pester 5+ tests
• Terraform — modules, providers (azurerm, helm, keycloak, mssql, kubernetes), state management
• .NET 8 build toolchain, NuGet, containerization (Docker/ACR)
• SonarQube for quality gates
• Networking: VNets, NSGs, private endpoints, DNS, ingress controllers, proxy configuration
• GitFlow branching model

Working Conditions

• Client: Public sector — Belgian institution
• Location: Brussels · 50% onsite
• Duration: 1 year, renewable
• Daily rate: €650 – €750
• Languages: English, French, Dutch (active knowledge required)

About Futurwork

A European tech ecosystem combining Consulting, Academy, and Startup Studio. We build long-term partnerships between consultants, clients, and startups — with a focus on Cybersecurity and Cloud / IT Infrastructure. Independent, transparent, and operating across Belgium and France.