About the role
Job Description
Reporting to the IT Director, works across both delivery squads and closely with the Principal Developer/Solution Architect, Security, and the legacy platform team.
Key Responsibilities
* Stand up and own the Azure landing zone: subscriptions, networking, identity, policy, cost controls and environment topology (dev, test, staging, production). * Build everything as infrastructure-as-code (Terraform or Bicep) so every environment is reproducible, reviewed and version-controlled. * Design and operate CI/CD pipelines in Azure DevOps / GitHub for backend, web and mobile, including automated testing and release gates. * Set up and operate customer identity (CIAM) — Entra External ID or equivalent — covering sign-up/sign-in, consent, MFA and token flows, in partnership with the Principal and Security. * Establish the mobile release pipeline: Expo EAS build and submit, Apple and Google developer accounts, code signing and over-the-air update channels. * Provide the container platform (Azure Container Apps) and the API gateway (Azure API Management) in front of the canonical API, with secrets and key management. * Provision managed SQL and data services, backups, and secure connectivity to the legacy platform and third-party providers. * Stand up observability — logging, metrics, tracing, dashboards and alerting — and the incident and on-call foundations. * Codify security and guardrails as policy and pipeline checks, so standards are enforced rather than advised. * Enable the squads with golden-path templates, developer documentation and self-service — a paved road others can build on.
Qualifications
* Proven experience as a DevOps, Platform or Cloud/Infrastructure Engineer building environments from the ground up on Azure. * Strong hands-on infrastructure-as-code with Terraform or Bicep. * Deep experience with Azure DevOps and/or GitHub Actions for CI/CD across multiple runtimes. * Experience running containerised workloads (Azure Container Apps / AKS) and API gateways (Azure API Management). * Experience implementing CIAM / customer identity (Entra External ID, Azure AD B2C, Auth0 or similar). * Solid grounding in cloud security, secrets management, networking and cost management. * Comfortable being the single owner of a greenfield platform, making pragmatic build-vs-buy calls with limited support. * Professional written and spoken English is required. Spanish, Italian or French are considered as a plus
Additional Information