Cloud Architect

Key Responsibilities

Cloud Platform and Infrastructure

Design, implement and operate secure, scalable Azure infrastructure.

Build and maintain Azure management groups, subscriptions, RBAC, networking and shared services.

Develop hub-and-spoke network architectures, including VNets, firewalls, private endpoints, VPN and ExpressRoute connectivity.

Support Azure services including Key Vault, Azure Monitor, Log Analytics, storage, Container Apps, Functions, Databricks and related platform components.

Establish consistent Dev, QA, UAT and Production environments.

Infrastructure as Code

Design and maintain reusable Terraform modules for Azure infrastructure.

Manage remote state, workspaces, module versioning and environment promotion.

Ensure platform resources are managed through version-controlled infrastructure-as-code rather than manual portal changes.

Implement drift detection, policy-as-code and controlled production deployments.

CI/CD and DevOps Automation

Build and maintain GitLab CI/CD pipelines for infrastructure and applications.

Implement pipeline stages covering formatting, validation, security scanning, planning, testing and deployment.

Establish merge-request-driven workflows with code review, Terraform plan visibility, approvals and gated production releases.

Create reusable CI/CD templates for application, data and infrastructure teams.

Automate deployment, smoke testing, rollback and release processes.

DevSecOps, Governance and Compliance

Integrate SAST, SCA, secret scanning, container and infrastructure security tools into CI/CD pipelines.

Define vulnerability thresholds and promotion policies.

Implement Azure Policy, tagging, encryption, private-endpoint and diagnostic-logging guardrails in accordance with applicable security, regulatory and internal requirements.

Work with Security and Infrastructure teams to embed secure-by-default practices across the platform.

Support cloud controls aligned with applicable financial-services regulatory, governance, security and operational requirements.

Reliability, Observability and Cost Optimisation

Implement monitoring, logging, alerting and operational dashboards using Azure Monitor, Log Analytics, Grafana and related tools.

Improve platform availability, resilience, disaster recovery and incident response.

Participate in troubleshooting, root-cause analysis, post-incident reviews and continuous improvement.

Develop cost-optimisation practices including rightsizing, autoscaling, non-production auto-shutdown and storage lifecycle management.

Improve deployment resilience, rollback strategies and operational runbooks.

Collaboration and Technical Leadership

Partner with application, data, security, infrastructure and engineering teams.

Coach engineers on Terraform, CI/CD, cloud architecture and production-readiness practices.

Review and improve Terraform configurations, pipeline definitions and technical designs.

Document platform patterns, standards, runbooks and implementation guides.

Contribute to technical strategy and the continued modernisation of Dymon's engineering platform.

Requirements

10-15 years of experience in DevOps, Cloud Engineering, Platform Engineering or Site Reliability Engineering.

Strong hands-on experience with Microsoft Azure.

Demonstrated experience designing and implementing Terraform modules and multi-environment infrastructure.

Strong experience building CI/CD pipelines using GitLab, Azure DevOps, GitHub Actions, Jenkins or similar tools.

Good understanding of Azure networking, including VNets, NSGs, private endpoints, VPN and ExpressRoute.

Experience with Azure RBAC, managed identities, Key Vault, Azure Policy, Azure Monitor and Log Analytics.

Proficiency in at least one scripting language, such as Python, PowerShell or Bash.

Practical experience with DevSecOps, including SAST, SCA, secret scanning, container or IaC security.

Strong troubleshooting and debugging skills across cloud infrastructure, pipelines and application deployments.

Excellent written and verbal communication skills.

Ability to work effectively with technical and non-technical stakeholders.

The core technical profile is based on the existing Azure Cloud Engineer requirements, which emphasise Terraform, GitLab CI/CD, Azure networking, DevSecOps, monitoring and cross-team enablement.

Desirable Experience

Azure landing zones and enterprise-scale cloud architecture.

Kubernetes, Docker or cloud-native application platforms.

Databricks, Azure Data Factory, Kafka, Spark or other data-platform technologies.

Hybrid cloud or on-premises migration projects.

Financial services, asset management, hedge funds or other regulated environments, with an understanding of applicable regulatory and control requirements.

Cloud security, identity governance, disaster recovery or FinOps.