Sphera is a leading global provider of enterprise software and services that enables companies to manage and optimize their environmental, health, safety and sustainability. Our mission is to create a safer, more sustainable and productive world. Sphera is a portfolio company of Blackstone, a U.S.-based alternative asset investment company that focuses on private equity, technology and innovation, and more.
Blackstone businesses succeed through strong partnerships, a personalized approach and a commitment to exceptional performance with uncompromising integrity. Sphera and Blackstone are leaders in the Environmental, Social and Governance (ESG) space. We are guided by our core values of Customer Centricity, Accountability, Bias to Action, Innovation, and Collaboration. These values help us recruit the right talent to join our rapidly expanding team of around the globe.
It is important to us that each and every Spherion is not only eager to challenge themselves and knows how to get work done but is an awesome addition to our company culture. You'll be part of a global team supporting multiple SaaS environments that help make the world a safer place. This role sits on the Platform Engineering team, where you will build the shared Azure services that every product family and engineering team across the business depends on.
That means two jobs at once: delivering new platform capabilities and features, and acting as the trusted expert other teams come to when they consume those services. We are Azure-first and PaaS-first, with everything defined in Terraform. The environment moves quickly — from IaaS to PaaS to serverless — so you'll apply the skills you have while learning new ones constantly. We do not run Kubernetes; our compute is Azure App Service, Function Apps, and Container Apps.
If you have deep, hands-on Azure PaaS and infrastructure-as-code experience and enjoy being the person who unblocks other engineers, you'll do well here. Key Responsibilities Design, build, and maintain the shared Azure platform services used across all product families — new projects and features as well as enhancements to existing services. Own platform infrastructure as code in Terraform: author reusable modules, manage state, review plans, and drive changes safely through environments.
Act as the platform's internal consultant — onboard product and engineering teams onto platform services, review their designs, troubleshoot integration issues, and document self-service patterns. Build and maintain CI/CD pipelines in Azure DevOps for infrastructure, application deployments, and Databricks assets. Manage the edge: Application Gateway and WAF configuration (rewrite rules, path-based routing, listeners, backend pools, custom rules, TLS) and Traffic Manager profiles for multi-region routing and failover.
Manage identity and access for the platform — Entra ID app registrations, OAuth 2.0 / OIDC flows, service principals and managed identities, and RBAC role design and assignment. Configure and maintain Azure AD B2C, including custom SSO XML policies (Identity Experience Framework), and support product teams integrating with them. Operate API Management — API and product configuration, policy authoring, versioning, and deployment of APIM changes through Terraform and pipelines.
Operate Azure Service Bus — namespaces, queues, topics, subscriptions, filters, and shared access policies and permissions — all deployed and updated as code. Support the MLOps team's deployment needs across Azure AI Foundry, Databricks, and model-serving workloads (detailed below). Automate security, compliance, cost, and resource-usage controls; monitor and continuously improve every deployment path.
Own operational excellence: establish and maintain business-focused KPIs and reliability targets, and use them both to drive improvement and to make the team's impact visible. Participate fully in the agile process — own your sprint tasks, log time worke