DevOpsPlatform Engineer

Reporting to the IT Director works across both delivery squads and closely with the Principal Developer/Solution Architect Security and the legacy platform team.

Key Responsibilities

• Stand up and own the Azure landing zone: subscriptions networking identity policy cost controls and environment topology (dev test staging production).
• Build everything as infrastructure-as-code (Terraform or Bicep) so every environment is reproducible reviewed and version-controlled.
• Design and operate CI/CD pipelines in Azure DevOps / GitHub for backend web and mobile including automated testing and release gates.
• Set up and operate customer identity (CIAM) Entra External ID or equivalent covering sign-up/sign-in consent MFA and token flows in partnership with the Principal and Security.
• Establish the mobile release pipeline: Expo EAS build and submit Apple and Google developer accounts code signing and over-the-air update channels.
• Provide the container platform (Azure Container Apps) and the API gateway (Azure API Management) in front of the canonical API with secrets and key management.
• Provision managed SQL and data services backups and secure connectivity to the legacy platform and third-party providers.
• Stand up observability logging metrics tracing dashboards and alerting and the incident and on-call foundations.
• Codify security and guardrails as policy and pipeline checks so standards are enforced rather than advised.
• Enable the squads with golden-path templates developer documentation and self-service a paved road others can build on.

Qualifications :

• Proven experience as a DevOps Platform or Cloud/Infrastructure Engineer building environments from the ground up on Azure.
• Strong hands-on infrastructure-as-code with Terraform or Bicep.
• Deep experience with Azure DevOps and/or GitHub Actions for CI/CD across multiple runtimes.
• Experience running containerised workloads (Azure Container Apps / AKS) and API gateways (Azure API Management).
• Experience implementing CIAM / customer identity (Entra External ID Azure AD B2C Auth0 or similar).
• Solid grounding in cloud security secrets management networking and cost management.
• Comfortable being the single owner of a greenfield platform making pragmatic build-vs-buy calls with limited support.
• Professional written and spoken English is required. Spanish Italian or French are considered as a plus

Additional Information :

Remote Work :

No

Employment Type :

Full-time