Description

Key Responsibilities

• Platform engineering: Design and build Azure landing zone components — subscription vending, networking, identity integration, policy baselines and guardrails — as reusable Terraform modules.
• Component ownership: Own significant platform products end-to-end: design, build, test, documentation and release management.
• CI/CD pipelines: Build and maintain GitHub Actions pipelines for infrastructure delivery, with security scanning, policy checks, testing and cost controls embedded as quality gates.
• Azure Local and hybrid: Contribute to the engineering of Azure Local capability and hybrid automation, extending the platform model into the client's private cloud estate.
• Standard images: Build and maintain pipelines for hardened compute standard images (build, test, publication).
• Self-service products: Package platform capabilities for consumption as self-service golden paths through the Port.io developer portal catalogue.
• Engineering standards: Help establish squad conventions — code review discipline, module structure, testing standards and documentation — and uphold them through peer review.
• Mentoring: Support and coach the squad's mid-level engineers; contribute to design discussions with the Engineering Lead and Platform Architect.

Required Experience

• 10+ years: in infrastructure, cloud or DevOps engineering, of which 8+ years hands-on Azure engineering.
• Azure platform depth: Strong experience with enterprise Azure — management groups, subscription design, Azure Policy, networking (hub-spoke or vWAN), Entra ID and security baselines.
• Terraform: Advanced, production Terraform experience: writing reusable modules, managing state, versioning and testing infrastructure code.
• CI/CD: Hands-on experience building infrastructure pipelines with GitHub Actions or an equivalent platform (Azure DevOps, GitLab CI) with willingness to standardise on GitHub Actions.
• Engineering discipline: Strong Git workflow, code review and documentation habits; experience working in sprint-based agile teams.
• Collaboration: Comfortable working in a distributed team with UK-based technical leadership and client stakeholders; clear written and spoken English.

Technologies & Tools

The Azure squad operates a modern, standardised toolchain:

• Core: Azure, Azure Local (Azure Stack HCI), Azure Arc, Terraform, GitHub, GitHub Actions.
• Policy and security: Azure Policy, Wiz and Checkov IaC scanning, OPA policy-as-code.
• Pipeline quality: tflint, terraform-docs, Infracost, Terratest.
• Orchestration: GitHub Actions for standard workflows; Temporal for complex, long-running orchestration.
• Consumption: Port.io internal developer portal as the self-service consumption route for Azure and private cloud products.
• Standard images: Image pipeline tooling for compute standard images (build, hardening, testing, publication).

Desirable

• Microsoft certifications (AZ-104 Azure Administrator, AZ-305 Azure Solutions Architect, AZ-400 DevOps Engineer).
• Azure Local / Azure Stack HCI or Azure Arc experience.
• Experience with policy-as-code (OPA, Sentinel) and IaC security scanning (Checkov, Wiz, tfsec).
• Exposure to internal developer portals (Port.io, Backstage) or platform engineering models.
• Experience in financial services or similarly regulated environments.
• Scripting in Python, PowerShell or Bash for automation tooling

Key Skills

Education

Bachelor's degree