DevOps/Platform Engineer

Reporting to the IT Director, works across both delivery squads and closely with the Principal Developer/Solution Architect, Security, and the legacy platform team.

Key Responsibilities

• Stand up and own the Azure landing zone: subscriptions, networking, identity, policy, cost controls and environment topology (dev, test, staging, production).
• Build everything as infrastructure-as-code (Terraform or Bicep) so every environment is reproducible, reviewed and version-controlled.
• Design and operate CI/CD pipelines in Azure DevOps / GitHub for backend, web and mobile, including automated testing and release gates.
• Set up and operate customer identity (CIAM) — Entra External ID or equivalent — covering sign-up/sign-in, consent, MFA and token flows, in partnership with the Principal and Security.
• Establish the mobile release pipeline: Expo EAS build and submit, Apple and Google developer accounts, code signing and over-the-air update channels.
• Provide the container platform (Azure Container Apps) and the API gateway (Azure API Management) in front of the canonical API, with secrets and key management.
• Provision managed SQL and data services, backups, and secure connectivity to the legacy platform and third-party providers.
• Stand up observability — logging, metrics, tracing, dashboards and alerting — and the incident and on-call foundations.
• Codify security and guardrails as policy and pipeline checks, so standards are enforced rather than advised.
• Enable the squads with golden-path templates, developer documentation and self-service — a paved road others can build on.
• Proven experience as a DevOps, Platform or Cloud/Infrastructure Engineer building environments from the ground up on Azure.
• Strong hands-on infrastructure-as-code with Terraform or Bicep.
• Deep experience with Azure DevOps and/or GitHub Actions for CI/CD across multiple runtimes.
• Experience running containerised workloads (Azure Container Apps / AKS) and API gateways (Azure API Management).
• Experience implementing CIAM / customer identity (Entra External ID, Azure AD B2C, Auth0 or similar).
• Solid grounding in cloud security, secrets management, networking and cost management.
• Comfortable being the single owner of a greenfield platform, making pragmatic build-vs-buy calls with limited support.
• Professional written and spoken English is required. Spanish, Italian or French are considered as a plus