Who are Inchcape
At Inchcape Shipping Services, our vision is to create a connected world where customers can trade successfully and make informed decisions in every port, everywhere. We achieve this by combining our worldwide infrastructure with local expertise, through our global network of more than 250 proprietary offices and a team of over 3,000 dedicated professionals. Our diverse customer base includes owners and charterers in the oil, cruise, container, and bulk commodity sectors, as well as naval, government, and intergovernmental organizations.
We have an ambitious growth model, and a career here is certainly going to be a rewarding one that will allow you to bring your skills & experience. We embrace change and are open to new thinking and pushing for positive change in our industry.
Job Location : Remote
Contract Type : Permanent
Main Purpose of Job
The Fabric Platform Engineer owns the technical foundations of ISS's Data & Reporting Platform a production-grade Microsoft Fabric environment that serves as the single source of truth for operational and commercial reporting across a global maritime shipping business operating in 60+ countries.
This role is responsible for the infrastructure, DevOps, connectivity, security model, and operational reliability of the platform. The Fabric Platform Engineer ensures that the gateway and network connectivity between ISS source systems and Fabric are always-on and production-grade; that platform artefacts are deployed safely and repeatably through CI/CD pipelines; that access controls, service principals, and secrets are correctly managed; and that the platform is observable, monitorable, and recoverable under production conditions.
This is a founding permanent role within the Fabric Data Team, assuming ownership of capabilities currently held by the external project delivery team. The role requires a professional who can operate independently at a senior level, takes end-to-end ownership of platform reliability, and understands that the platform's availability directly affects ISS's ability to serve its external shipping principal customers.
Key Accountabilities
- Operate the Microsoft Fabric platform infrastructure including workspace topology, capacity allocation, and environment separation (Dev / UAT / Prod).
- Own the hybrid connectivity layer between ISS source systems (OpticDB, World of Ports, Boomi, Eye-Share, Unit4) and Fabric, including AWS-hosted On-Premises Data Gateway clusters, site-to-site VPN configurations, and VPC Peering. Ensure gateway high availability in production through clustered EC2 configurations managed via Terraform.
- Build and maintain CI/CD pipelines in Azure DevOps for automated deployment of Fabric artefacts across environments. Define and enforce the branching strategy, pull request governance, and release process for all platform assets stored in Azure DevOps Git repositories.
- Implement and govern the platform access model: Entra ID (Azure AD) group structure, workspace RBAC assignments, and environment-specific permission controls. Own the Service Principal strategy, credential lifecycle management, secrets rotation via Azure Key Vault, and IAM review cadence.
- Configure and maintain the Power BI App Owns Data embedding architecture for internal ISS applications (e.g. Optic / OneCape), including authentication flows, workspace access grants, and Row-Level Security (RLS) validation for both internal users and external shipping principals (B2B guest identities).
- Implement and manage platform monitoring across all layers: Fabric capacity utilisation dashboards, pipeline execution health, gateway connectivity, and EC2 instance performance via Amazon CloudWatch. Define alerting thresholds, escalation paths, and own first-line incident triage for infrastructure-level issues.
- Onboard new data sources using the established ingestion framework and connectivity patterns, without requiring bespoke infrastructure changes. Manage new external customer
- onboarding: create Entra ID security groups, grant workspace access, and insert Row-Level Security entries into the Gold Warehouse per the agreed process.
- Own the Fabric capacity cost model: conduct monthly reviews of CU consumption across Non-Prod and Prod capacities, attribute costs by workload, and report findings with scaling recommendations to the Head of Fabric Data Platform
- Support the Enterprise Data Architect in registering Gold data assets in Microsoft Purview: metadata tagging, lineage documentation, and ownership assignment. Contribute to platform development standards, naming conventions, and engineering artefact templates.
- Identify opportunities to automate operational workflows using Power Automate and the broader Microsoft Power Platform, including licence request approval flows, platform alert notifications, and data pipeline trigger automation.
- Stay current with the Microsoft Fabric and Azure DevOps roadmap; evaluate new features and capabilities relevant to ISS's platform model and advise the team on adoption opportunities.
Key Deliverables :
- A production-grade Fabric platform infrastructure managed as code (Terraform), with documented gateway architecture, environment topology, and deployment runbooks available in Azure DevOps.
- Fully operational CI/CD pipelines for Fabric artefact promotion across Dev / UAT / Prod, with enforced branching strategy and auditable release history.
- A defined and implemented platform access model: Entra ID group structure, RBAC assignments, Service Principal inventory, Key Vault secrets management, and quarterly access review records.
- Functioning App Owns Data Power BI embedding for the Optic and OneCape applications, with documented authentication flows, RLS configurations per shipping principal, and onboarding runbook.
- Platform observability dashboards and alerting configurations across Fabric capacity, pipeline health, and gateway infrastructure; documented incident response and escalation paths.
- Monthly cost and capacity reports for Fabric platform capacities, with utilisation trends and scaling recommendations, delivered to the Head of Fabric Data Platform.
- Operational runbooks for all recurring BAU activities: data source onboarding, customer reporting onboarding, Power BI Pro licence management, and secrets rotation
- Implement the Microsoft recommended resilient model for components and products of the Data Platform to ensure Availability, Disaster Recovery and Business Continuity
Competency Requirements
Technical
Cloud infrastructure & IaC (Terraform)
Azure DevOps & CI/CD pipelines
Microsoft Fabric platform administration
Hybrid network connectivity (VPN, gateways)
Identity & access management (Entra ID)
Lakehouse/Warehouse Administration
Key
Attention to detail & operational rigour
Problem solving & incident diagnosis
Communication & documentation
Stakeholder collaboration
Security & risk awareness
Management
Platform governance & standards
Change & release management
Planning & prioritisation
Operational ownership mindset
Knowledge, Experience and Skills
Essential
- 5+ years in a platform engineering, cloud engineering, or data DevOps role, operating production cloud infrastructure with uptime and reliability responsibilities.
- Hands-on experience with Microsoft Fabric: workspace administration, capacity management, Git integration with Azure DevOps, and Fabric Deployment Pipelines.
- Strong Azure DevOps experience: CI/CD pipeline authoring, branching strategies, pull request governance, and release management for data platform artefacts.
- Infrastructure-as-Code experience using Terraform (mandatory for gateway and EC2 management).
- Experience with Python or PowerShell scripting for platform automation tasks.
- Hands-on AWS experience: EC2 instance management, VPC and subnet configuration, Security Groups, CloudWatch monitoring.
- Experience managing On-Premises Data Gateways or SHIR runtimes in a production environment, including high availability cluster configuration and patching.
- Understanding of hybrid network connectivity: site-to-site VPN, VPC Peering, private subnets, and traffic routing.
- Solid understanding of Entra ID (Azure AD): security groups, service principals, B2B guest identities, and RBAC implementation.
- Experience with Power BI workspace administration, deployment pipelines, and publish-to-service workflows including App Owns Data embedding model.
- Familiarity with secrets management (Azure Key Vault or equivalent) and credential rotation practices.
- Strong written and verbal communication skills in English; ability to document architecture decisions and produce operational runbooks clearly.
Desirable
- Experience with Microsoft Purview: data asset registration, lineage management, and governance catalogue.
- Familiarity with Terraform Cloud or Terragrunt for multi-environment state management.
- Experience with AWS Systems Manager (SSM) for EC2 access and patch management.
- Knowledge of Power BI API automation: workspace provisioning, dataset refresh triggers, license management via REST API.
- Familiarity with Microsoft Power Automate and the Power Platform suite for building lightweight operational automation workflows.
- Prior exposure to maritime, logistics, or complex international supply chain environments
Please note that this role requires you to visit our Chennai office once every quarter. The travel expenses for these visits will need to be covered at your own expense.
Education and Professional Qualification:
Essential
- Bachelor's degree in computer science, information systems, software engineering, or a related field.
Desirable
- AZ-104: Microsoft Azure Administrator, demonstrating hands-on Azure infrastructure management experience.
- AZ-400: Designing and Implementing Microsoft DevOps Solutions, demonstrating CI/CD and release engineering expertise.
- DP-700: Implementing Data Engineering Solutions Using Microsoft Fabric (Microsoft Certified)
Other Requirements
Essential
- Ability to work closely with global, distributed teams and communicate effectively across cultures and time zones.
- Willingness to take end-to-end ownership of platform reliability, including responding to production incidents outside standard business hours when required.
- Passion for data platform engineering and commitment to building infrastructure that scales reliably with business demand.
- Commitment to staying current with Microsoft Fabric, Azure DevOps, and AWS platform developments.
Desirable
- Additional language proficiency
- Experience in an MSP, managed platform, or shared services environment where multiple clients or workloads share the same platform infrastructure.
Why Inchcape Shipping Services?
We believe in building a diverse and high performing workforce, that works together to provide our customers with the exceptional service they deserve. To reach the highest standards we depend on our people, their welfare, training and expertise. We realise the value of our staff and know that your unique experiences, skills and passions will help you to build a rich and rewarding career in our dynamic industry.
Our values are at the centre of everything we do, and the successful candidate will be expected to demonstrate and fully adopt these:
Global Perspective - we connect the world and see the bigger picture.
The Power of People - we rely on the strength of local agent knowledge and relationships.
Progress - we adopt new thinking and push for positive change in our industry.
In return, we will offer you:
A diverse range of benefits, depending on your geographical location. Globally as a minimum you will receive:
• A retirement savings plan
• Life assurance
• Healthcare
• Competitive salary
• Employee Assistance Programme
• Career development and progression opportunities
• Values Award celebration events
• Team building days
• Hybrid Working Model (Role Dependant)
Plus, much more!
If you think that you have the right skills, knowledge and attitude to join our team, then we invite you to apply by simply clicking at the top of this advert!
#ISSthebiggerpicture
Appointment to this role will be subject to satisfactory references and possession of a valid Right to Work documentation depending upon your geographical location.
Inchcape is an Equal Employment Opportunity Employer and equality, diversity and inclusion are at the centre of everything we do. We recognise that our customers, colleagues, contractors and other partners are central to our success and that we work in a diverse society. We acknowledge not only our legal, but also our moral responsibility to ensure all groups have equality of opportunity.
#LI-MB1
New Zealand