Sphera is a leading global provider of enterprise software and services that enables companies to manage and optimize their environmental, health, safety and sustainability. Our mission is to create a safer, more sustainable and productive world.
Sphera is a portfolio company of Blackstone, a U.S.-based alternative asset investment company that focuses on private equity, technology and innovation, and more. Blackstone businesses succeed through strong partnerships, a personalized approach and a commitment to exceptional performance with uncompromising integrity. Sphera and Blackstone are leaders in the Environmental, Social and Governance (ESG) space.
We are guided by our core values of Customer Centricity, Accountability, Bias to Action, Innovation, and Collaboration. These values help us recruit the right talent to join our rapidly expanding team of around the globe. It is important to us that each and every Spherion is not only eager to challenge themselves and knows how to get work done but is an awesome addition to our company culture.
You'll be part of a global team supporting multiple SaaS environments that help make the world a safer place. This role sits on the Platform Engineering team, where you will build the shared Azure services that every product family and engineering team across the business depends on. That means two jobs at once: delivering new platform capabilities and features, and acting as the trusted expert other teams come to when they consume those services.
We are Azure-first and PaaS-first, with everything defined in Terraform. The environment moves quickly — from IaaS to PaaS to serverless — so you'll apply the skills you have while learning new ones constantly. We do not run Kubernetes; our compute is Azure App Service, Function Apps, and Container Apps. If you have deep, hands-on Azure PaaS and infrastructure-as-code experience and enjoy being the person who unblocks other engineers, you'll do well here.
Key Responsibilities- Design, build, and maintain the shared Azure platform services used across all product families — new projects and features as well as enhancements to existing services.
- Own platform infrastructure as code in Terraform: author reusable modules, manage state, review plans, and drive changes safely through environments.
- Act as the platform's internal consultant — onboard product and engineering teams onto platform services, review their designs, troubleshoot integration issues, and document self-service patterns.
- Build and maintain CI/CD pipelines in Azure DevOps for infrastructure, application deployments, and Databricks assets.
- Manage the edge: Application Gateway and WAF configuration (rewrite rules, path-based routing, listeners, backend pools, custom rules, TLS) and Traffic Manager profiles for multi-region routing and failover.
- Manage identity and access for the platform — Entra ID app registrations, OAuth 2.0 / OIDC flows, service principals and managed identities, and RBAC role design and assignment.
- Configure and maintain Azure AD B2C, including custom SSO XML policies (Identity Experience Framework), and support product teams integrating with them.
- Operate API Management — API and product configuration, policy authoring, versioning, and deployment of APIM changes through Terraform and pipelines.
- Operate Azure Service Bus — namespaces, queues, topics, subscriptions, filters, and shared access policies and permissions — all deployed and updated as code.
- Support the MLOps team's deployment needs across Azure AI Foundry, Databricks, and model-serving workloads (detailed below).
- Automate security, compliance, cost, and resource-usage controls; monitor and continuously improve every deployment path.
- Own operational excellence: establish and maintain business-focused KPIs and reliability targets, and use them both to drive improvement and to make the team's impact visible.
- Participate fully in the agile process — own your sprint tasks, log time worked, and keep details current.
A distinct part of this role is enabling our MLOps team. You will be their platform-side partner for:
- Deploying and configuring Azure AI Foundry projects, model deployments, and endpoints via Terraform and pipelines.
- Databricks workspace deployment and configuration, including Unity Catalog, clusters, access control, and secret scopes.
- Databricks job and workflow deployment pipelines, and promotion of notebooks, jobs, and DLT pipelines across environments.
- Implementing and enforcing AI guardrails and content-safety controls, plus the networking, private endpoints, and identity plumbing that keep model traffic and data private.
- Building repeatable, auditable deployment pipelines for models and AI services so the MLOps team can ship without manual steps.
Azure Platform
- Compute (PaaS and serverless): Deep hands-on experience with Azure Web Apps / App Service, Azure Function Apps, and Azure Container Apps — deployment slots, scaling rules, VNet integration, and configuration management.
- Networking and edge: Application Gateway and WAF — rewrite rules, path-based routing, listeners, backend pools, health probes, custom WAF rules and exclusions, and TLS/certificate management. Traffic Manager profiles and routing methods.
- Cloud networking: VNets, subnets, NSGs, route tables, hub-and-spoke architecture, Private Endpoints, and Private DNS.
- Messaging and integration: Azure Service Bus — namespaces, queues, topics, subscriptions, subscription filters and rules, and shared access policies and permissions.
- API Management: APIM configuration and policy authoring (inbound, outbound, backend, and on-error), products and subscriptions, named values, versioning and revisions, and managing APIM changes through code and pipelines rather than the portal.
- Identity and access: Entra ID — app registrations, API permissions and consent, service principals and managed identities, OAuth 2.0 and OIDC flows, token and claims configuration, and Azure RBAC design and assignment.
- B2C and SSO: Azure AD B2C user flows and custom policies, including hands-on work with SSO XML policy files (Identity Experience Framework), and SAML/OIDC federation with external identity providers.
- Supporting services: Storage Accounts, Key Vault, Azure Cache for Redis, and Azure Monitor / Log Analytics / Application Insights.
Infrastructure as Code and Automation
- Terraform — full working command, not just familiarity: authoring reusable modules, managing remote state and workspaces, provider and version pinning, plan/apply review discipline, import and drift remediation, and using Terraform as the single path for all resource changes — including APIM configuration and policy and Service Bus topology and access policies.
- Strong CI/CD experience with Azure DevOps — YAML pipelines (and comfort with classic pipelines), multi-stage deployments, environments, approvals, service connections, and variable/secret management.
- Strong scripting skills in PowerShell and/or Bash; fluent with Azure CLI.
- Solid Git and source-control practice — branching strategy, pull requests, and code review.
Engineering and Professional
- Proven success managing and optimizing infrastructure and CI/CD for an Azure-based SaaS product at scale.
- Strong understanding of security principles — least privilege, secrets management, network isolation, certificate lifecycle, and compliance-driven controls.
- Working knowledge of databases, both SQL and NoSQL.
- Excellent communication and collaboration skills, with the ability to work across multiple disciplines and explain platform decisions to engineers who are not infrastructure specialists.
- Strong analytical skills and a track record of driving measurable reliability improvements.
- Experience working in an agile SDLC in a fast-paced environment with high demand and high standards.
- Ability to assimilate information quickly under pressure, and strong planning skills to ensure projects are delivered on time.
- Bachelor's degree in Computer Science or a similar field, or equivalent practical experience.
- Hands-on Azure AI Foundry, Azure OpenAI, or comparable managed AI platform deployment experience.
- Databricks administration and deployment automation — Unity Catalog, Databricks Asset Bundles, or the Databricks Terraform provider.
- Experience supporting MLOps or data engineering teams, including model deployment, guardrails, and content safety.
- Azure Data Factory or comparable data orchestration tooling.
- Authoring or heavily customizing B2C custom policy XML from scratch.
- Containers and Docker for microservice or service-oriented architectures. Note: we do not use Kubernetes, and Kubernetes experience is not required for this role.
- Monitoring and security tooling such as New Relic, Rapid7, Azure Monitor workbooks, or similar.
- Relevant Azure certifications (AZ-104, AZ-400, AZ-500, or similar).
- Familiarity with C#, Java, Python, or JavaScript/React — enough to read application code and debug deployment and configuration issues alongside product teams.
Sphera is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all colleagues.
This job description is intended to convey information essential to understanding the scope of the job and the general nature and level of work performed by job holders within this job. This job description is not intended to be an exhaustive list of qualifications, skills, efforts, duties, responsibilities or working conditions associated with the position.
Skills Required
- Deep hands-on experience with Azure App Service, Azure Function Apps, and Azure Container Apps, including scaling, deployment slots, VNet integration, and configuration management.
- Hands-on experience with Azure Application Gateway, WAF, Traffic Manager, routing, TLS, health probes, and certificate management.
- Experience with Azure VNets, subnets, NSGs, route tables, hub-and-spoke architecture, Private Endpoints, and Private DNS.
- Strong Terraform experience authoring reusable modules, managing remote state and workspaces, reviewing plans, importing resources, and remediating drift.
- Strong Azure DevOps CI/CD experience with YAML pipelines, multi-stage deployments, environments, approvals, service connections, and secrets management.
- Strong scripting skills in PowerShell and/or Bash, plus fluency with Azure CLI.
- Experience with Azure Service Bus namespaces, queues, topics, subscriptions, filters, and access policies.
- Experience configuring Azure API Management, authoring policies, and deploying APIM changes through code and pipelines.
- Experience with Microsoft Entra ID, app registrations, service principals, managed identities, OAuth 2.0, OIDC, and Azure RBAC.
- Hands-on Azure AD B2C experience, including custom policies, SSO XML, and SAML/OIDC federation.
- Experience with Azure Storage, Key Vault, Azure Cache for Redis, Azure Monitor, Log Analytics, and Application Insights.
- Experience managing and optimizing infrastructure and CI/CD for an Azure-based SaaS product at scale.
- Strong understanding of least privilege, secrets management, network isolation, certificate lifecycle, and compliance controls.
- Working knowledge of SQL and NoSQL databases.
- Bachelor’s degree in Computer Science or a related field, or equivalent practical experience.
- Hands-on experience with Azure AI Foundry, Azure OpenAI, or a comparable managed AI platform.
- Databricks administration and deployment automation, including Unity Catalog, Databricks Asset Bundles, or the Databricks Terraform provider.
- Experience supporting MLOps or data engineering teams with model deployment, guardrails, and content safety.
- Experience with Azure Data Factory or comparable data orchestration tools.
- Experience authoring or heavily customizing Azure AD B2C policy XML.
- Experience with containers and Docker for microservice or service-oriented architectures.
- Experience with New Relic, Rapid7, Azure Monitor workbooks, or similar monitoring and security tools.
- Relevant Azure certifications such as AZ-104, AZ-400, or AZ-500.
- Familiarity with C#, Java, Python, or JavaScript/React for reading application code and debugging deployment issues.
Sphera Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Sphera and has not been reviewed or approved by Sphera.
-
Strong & Reliable Incentives — Sales on‑target earnings can be competitive for certain roles, with healthy ranges and high OTE potential for Solution/Account Executives. Feedback suggests on‑plan earnings compare well against many B2B software peers.
-
Healthcare Strength — Medical, dental and vision coverage are characterized as good, with low deductibles and a significant employer share of premiums. Feedback suggests core health insurance quality is a relative strength.
-
Retirement Support — A 401(k) with employer match is consistently referenced, with a clear structure that enables a meaningful company contribution when employees contribute. Feedback suggests retirement offerings are straightforward and valued.
Sphera Insights
What We Do
Sphera is the leading provider of integrated sustainability and operational risk management software, data and consulting services focusing on Environment, Health, Safety & Sustainability (EHS&S), Process Safety, Product Stewardship and Supply Chain Transparency. For more than 30 years, we have served 8,500 customers and a million-plus users in 100 countries to help companies keep their people safe, their products sustainable and their operations productive. We help enterprises build sustainable businesses while keeping people and the planet safe. Our solutions provide critical visibility and alignment across safety, risk, and supply chains -- empowering organizations to create lasting, sustainable impact. Our Mission: To create a safer, more sustainable and productive world by advancing operational excellence. Sphera's many internal initiatives, such as its annual Mentoring Program, running for its sixth year in 2025, supports staff in feeling and achieving their best. The goal of the Mentoring Program is to help participants achieve career development, personal growth, and create opportunities to partner with others from across the organization.
Why Work With Us
At Sphera we are solving some of the most important challenges facing the world today. Our staff, some of the world’s leading safety and sustainability experts, are meeting this challenge. Sphera is a hybrid company, with Chicago team attending SpheraIn days. We are always looking for talented people who want to make a difference.
Gallery
.jpg)
