Reporting to the IT Director, works across both delivery squads and closely with the Principal Developer/Solution Architect, Security, and the legacy platform team.
Key Responsibilities
- Stand up and own the Azure landing zone: subscriptions, networking, identity, policy, cost controls and environment topology (dev, test, staging, production).
- Build everything as infrastructure-as-code (Terraform or Bicep) so every environment is reproducible, reviewed and version-controlled.
- Design and operate CI/CD pipelines in Azure DevOps / GitHub for backend, web and mobile, including automated testing and release gates.
- Set up and operate customer identity (CIAM) — Entra External ID or equivalent — covering sign-up/sign-in, consent, MFA and token flows, in partnership with the Principal and Security.
- Establish the mobile release pipeline: Expo EAS build and submit, Apple and Google developer accounts, code signing and over-the-air update channels.
- Provide the container platform (Azure Container Apps) and the API gateway (Azure API Management) in front of the canonical API, with secrets and key management.
- Provision managed SQL and data services, backups, and secure connectivity to the legacy platform and third-party providers.
- Stand up observability — logging, metrics, tracing, dashboards and alerting — and the incident and on-call foundations.
- Codify security and guardrails as policy and pipeline checks, so standards are enforced rather than advised.
- Enable the squads with golden-path templates, developer documentation and self-service — a paved road others can build on.
- Proven experience as a DevOps, Platform or Cloud/Infrastructure Engineer building environments from the ground up on Azure.
- Strong hands-on infrastructure-as-code with Terraform or Bicep.
- Deep experience with Azure DevOps and/or GitHub Actions for CI/CD across multiple runtimes.
- Experience running containerised workloads (Azure Container Apps / AKS) and API gateways (Azure API Management).
- Experience implementing CIAM / customer identity (Entra External ID, Azure AD B2C, Auth0 or similar).
- Solid grounding in cloud security, secrets management, networking and cost management.
- Comfortable being the single owner of a greenfield platform, making pragmatic build-vs-buy calls with limited support.
- Professional written and spoken English is required. Spanish, Italian or French are considered as a plus