Cloud Engineer

Role summary

You will be a senior member of the Azure Cloud Team, responsible for designing, building, and operating the CI/CD and Infrastructure‑as‑Code (IaC) layer that underpins Dymon's Azure cloud platform. You'll own the Terraform + GitLab toolchain for management groups, subscriptions, networks, shared services, and application landing zones, and help embed DevSecOps practices into every pipeline.

Key responsibilities

1. Terraform & environment automation

Design and implement Terraform modules for Azure:

Management groups, subscriptions, RBAC.

Hub‑and‑spoke VNets, firewalls, private endpoints.

Shared services: Key Vault, Log Analytics/Grafana, storage, container apps, data platform components.

Manage remote state, workspaces, module versioning , and promote changes safely across dev/qa/prod.

2. GitLab CI/CD for infrastructure

Build and maintain GitLab CI pipelines for infra:

Stages for fmt / validate / plan / apply (non‑prod and gated prod).

MR‑driven workflows with terraform plan comments, approvals, and controlled apply .

Create reusable CI templates so app/data teams can easily consume standard jobs (infra, deploy, smoke tests).

3. Application CI/CD enablement

Work with app and data teams to:

Integrate their repos with GitLab CI templates (build, test, deploy).

Wire deployments into Azure landing zones (App Service / Container Apps / Functions / Databricks, etc.).

Implement environment patterns (Dev/QA/UAT/Prod) aligned to the new subscription and VNet structure.

4. DevSecOps integration

Integrate security scanning tools into CI pipelines (e.g. Jfrog Advanced Security, SAST/SCA/IaC scanners).

Help define policies and thresholds for blocking promotions based on vulnerability severity.

Collaborate with Security/Infra to ensure that pipelines enforce guardrails by default (e.g. policy checks, image/IaC scans).

5. Reliability, observability & optimisation

Integrate pipelines with monitoring/alerting (Azure Monitor, Log Analytics, Grafana) for both infra and apps.

Contribute to cost optimisation :

Patterns for auto‑shutdown of non‑prod.

Standardized scaling and sizing parameters in Terraform modules.

Participate in incident response and post‑mortems, improving pipeline resilience and roll‑back strategies.

6. Standards, coaching & documentation

Document CI/CD patterns, Terraform module usage, and 'how‑to' guides for engineers.

Coach developers and other engineers on:

Using GitLab pipelines and templates.

Writing safe Terraform changes and reading plan outputs.

Promote an 'infra‑as‑code only' mindset (no manual portal changes for platform resources).

Requirements

Experience

5-8 years in DevOps / Platform Engineering , with significant time on Azure .

Strong hands‑on experience with Terraform on Azure (modules, multi‑env setups, state backends).

Proven track record building CI/CD pipelines in GitLab (or similar) for both infra and applications.

Technical skills

Solid understanding of Azure basics: VNets, NSGs, private endpoints, VPN/ExpressRoute.

Solid understanding of Azure basics: RBAC, managed identities, Key Vault, Log Analytics.

Competent in at least one scripting language (e.g. Python, PowerShell, Bash) for automation/glue code.

Familiarity with DevSecOps practices : Integrating SAST, SCA/OSS, secret scanning, and/or container/IaC scanning into pipelines.

Ways of working

Comfortable reviewing and improving others' Terraform and CI configurations via MRs.

Strong debugging and troubleshooting skills across infra, pipelines, and cloud services.

Clear written and verbal communication able to work with infra, security, and application teams.