India - Fabric Platform Engineer

About Inchcape Shipping Services

At Inchcape, our vision is to have a connected world, in which our customers trade successfully and make better decisions in every port, everywhere. We use technology and our global network to help our partners connect to a smoother, smarter ocean.

Inchcape combines its worldwide infrastructure with local expertise through our global network of over 250 proprietary offices, across 70 countries and a team of more than 3,000 committed professionals. Our diverse global customer base includes owners and charterers in the oil, cruise, container, and bulk commodity sectors as well as naval, government and intergovernmental organizations.

We have an ambitious growth model and a career here is certainly going to be a rewarding one that will allow you to bring your skills & experience. We embrace change and are open to new thinking and pushing for positive change in our industry.

Main Purpose of Job

The Fabric Platform Engineer owns the technical foundations of ISS's Data & Reporting Platform — a production-grade Microsoft Fabric environment that serves as the single source of truth for operational and commercial reporting across a global maritime shipping business operating in 60+ countries. 

This role is responsible for the infrastructure, DevOps, connectivity, security model, and operational reliability of the platform. The Fabric Platform Engineer ensures that the gateway and network connectivity between ISS source systems and Fabric are always-on and production-grade; that platform artefacts are deployed safely and repeatably through CI/CD pipelines; that access controls, service principals, and secrets are correctly managed; and that the platform is observable, monitorable, and recoverable under production conditions. 

This is a founding permanent role within the Fabric Data Team, assuming ownership of capabilities currently held by the external project delivery team. The role requires a professional who can operate independently at a senior level, takes end-to-end ownership of platform reliability, and understands that the platform's availability directly affects ISS's ability to serve its external shipping principal customers. 

 Key Accountabilities

Develop comprehensive Power BI reports and dashboards using certified semantic models; leverage advanced features for interactivity and storytelling. 

Operate the Microsoft Fabric platform infrastructure including workspace topology, capacity allocation, and environment separation (Dev / UAT / Prod). 

Own the hybrid connectivity layer between ISS source systems (OpticDB, World of Ports, Boomi, Eye-Share, Unit4) and Fabric, including AWS-hosted On-Premises Data Gateway clusters, site-to-site VPN configurations, and VPC Peering. Ensure gateway high availability in production through clustered EC2 configurations managed via Terraform. 

Build and maintain CI/CD pipelines in Azure DevOps for automated deployment of Fabric artefacts across environments. Define and enforce the branching strategy, pull request governance, and release process for all platform assets stored in Azure DevOps Git repositories. 

Implement and govern the platform access model: Entra ID (Azure AD) group structure, workspace RBAC assignments, and environment-specific permission controls. Own the Service Principal strategy, credential lifecycle management, secrets rotation via Azure Key Vault, and IAM review cadence.

Configure and maintain the Power BI App Owns Data embedding architecture for internal ISS applications (e.g. Optic / OneCape), including authentication flows, workspace access grants, and Row-Level Security (RLS) validation for both internal users and external shipping principals (B2B guest identities). 

Implement and manage platform monitoring across all layers: Fabric capacity utilisation dashboards, pipeline execution health, gateway connectivity, and EC2 instance performance via Amazon CloudWatch. Define alerting thresholds, escalation paths, and own first-line incident triage for infrastructure-level issues. 

Onboard new data sources using the established ingestion framework and connectivity patterns, without requiring bespoke infrastructure changes. Manage new external customer onboarding: create Entra ID security groups, grant workspace access, and insert Row-Level Security entries into the Gold Warehouse per the agreed process. 

Own the Fabric capacity cost model: conduct monthly reviews of CU consumption across Non-Prod and Prod capacities, attribute costs by workload, and report findings with scaling recommendations to the Head of Data & Reporting Platform.

Support the Enterprise Data Architect in registering Gold data assets in Microsoft Purview: metadata tagging, lineage documentation, and ownership assignment. Contribute to platform development standards, naming conventions, and engineering artefact templates

Identify opportunities to automate operational workflows using Power Automate and the broader Microsoft Power Platform — including licence request approval flows, platform alert notifications, and data pipeline trigger automation. 

Stay current with the Microsoft Fabric and Azure DevOps roadmap; evaluate new features and capabilities relevant to ISS's platform model and advise the team on adoption opportunities

Key Deliverables

A production-grade Fabric platform infrastructure managed as code (Terraform), with documented gateway architecture, environment topology, and deployment runbooks available in Azure DevOps.

Fully operational CI/CD pipelines for Fabric artefact promotion across Dev / UAT / Prod, with enforced branching strategy and auditable release history. 

A defined and implemented platform access model: Entra ID group structure, RBAC assignments, Service Principal inventory, Key Vault secrets management, and quarterly access review records. 

Functioning App Owns Data Power BI embedding for the Optic and OneCape applications, with documented authentication flows, RLS configurations per shipping principal, and onboarding runbook. 

Platform observability dashboards and alerting configurations across Fabric capacity, pipeline health, and gateway infrastructure; documented incident response and escalation paths.

Monthly cost and capacity reports for Fabric platform capacities, with utilisation trends and scaling recommendations, delivered to the Head of Data & Reporting Platform. 

Operational runbooks for all recurring BAU activities: data source onboarding, customer reporting onboarding, Power BI Pro licence management, and secrets rotation

Essential

5+ years in a platform engineering, cloud engineering, or data DevOps role, operating production cloud infrastructure with uptime and reliability responsibilities. 

Hands-on experience with Microsoft Fabric: workspace administration, capacity management, Git integration with Azure DevOps, and Fabric Deployment Pipelines. 

Strong Azure DevOps experience: CI/CD pipeline authoring, branching strategies, pull request governance, and release management for data platform artefacts. 

Infrastructure-as-Code experience using Terraform — mandatory for gateway and EC2 management. 

Hands-on AWS experience: EC2 instance management, VPC and subnet configuration, Security Groups, CloudWatch monitoring. 

Experience managing On-Premises Data Gateways or SHIR runtimes in a production environment, including high availability cluster configuration and patching. 

Understanding of hybrid network connectivity: site-to-site VPN, VPC Peering, private subnets, and traffic routing. 

Solid understanding of Entra ID (Azure AD): security groups, service principals, B2B guest identities, and RBAC implementation. 

Experience with Power BI workspace administration, deployment pipelines, and publish-to-service workflows including App Owns Data embedding model. 

Familiarity with secrets management (Azure Key Vault or equivalent) and credential rotation practices. 

Strong written and verbal communication skills in English; ability to document architecture decisions and produce operational runbooks clearly. 

Desirable:

Experience with Microsoft Purview: data asset registration, lineage management, and governance catalogue. 

Familiarity with Terraform Cloud or Terragrunt for multi-environment state management. 

Experience with AWS Systems Manager (SSM) for EC2 access and patch management. 

Knowledge of Power BI API automation: workspace provisioning, dataset refresh triggers, licence management via REST API. 

Familiarity with Microsoft Power Automate and the Power Platform suite for building lightweight operational automation workflows. 

Experience with Python or PowerShell scripting for platform automation tasks. 

Prior exposure to maritime, logistics, or complex international supply chain environment.

Essential

Bachelor's degree in computer science, information systems, software engineering, or a related field. 

DP-700: Implementing Data Engineering Solutions Using Microsoft Fabric (Microsoft Certified) 

Desirable

AZ-104: Microsoft Azure Administrator — demonstrating hands-on Azure infrastructure management experience.

AZ-400: Designing and Implementing Microsoft DevOps Solutions— demonstrating CI/CD and release engineering expertise

#LI-Hybrid