Role summary
You will be a senior member of the Azure Cloud Team, responsible for designing, building, and operating the CI/CD and Infrastructure‑as‑Code (IaC) layer that underpins Dymon's Azure cloud platform. You'll own the Terraform + GitLab toolchain for management groups, subscriptions, networks, shared services, and application landing zones, and help embed DevSecOps practices into every pipeline.
Key responsibilities
1. Terraform & environment automation
- Design and implement Terraform modules for Azure:
- Management groups, subscriptions, RBAC.
- Hub‑and‑spoke VNets, firewalls, private endpoints.
- Shared services: Key Vault, Log Analytics/Grafana, storage, container apps, data platform components.
- Manage remote state, workspaces, module versioning, and promote changes safely across dev/qa/prod.
2. GitLab CI/CD for infrastructure
- Build and maintain GitLab CI pipelines for infra:
- Stages for fmt / validate / plan / apply (non‑prod and gated prod).
- MR‑driven workflows with terraform plan comments, approvals, and controlled apply.
- Create reusable CI templates so app/data teams can easily consume standard jobs (infra, deploy, smoke tests).
3. Application CI/CD enablement
- Work with app and data teams to:
- Integrate their repos with GitLab CI templates (build, test, deploy).
- Wire deployments into Azure landing zones (App Service / Container Apps / Functions / Databricks, etc.).
- Implement environment patterns (Dev/QA/UAT/Prod) aligned to the new subscription and VNet structure.
4. DevSecOps integration
- Integrate security scanning tools into CI pipelines (e.g. Jfrog Advanced Security, SAST/SCA/IaC scanners).
- Help define policies and thresholds for blocking promotions based on vulnerability severity.
- Collaborate with Security/Infra to ensure that pipelines enforce guardrails by default (e.g. policy checks, image/IaC scans).
5. Reliability, observability & optimisation
- Integrate pipelines with monitoring/alerting (Azure Monitor, Log Analytics, Grafana) for both infra and apps.
- Contribute to cost optimisation:
- Patterns for auto‑shutdown of non‑prod.
- Standardized scaling and sizing parameters in Terraform modules.
- Participate in incident response and post‑mortems, improving pipeline resilience and roll‑back strategies.
6. Standards, coaching & documentation
- Document CI/CD patterns, Terraform module usage, and how‑to guides for engineers.
- Coach developers and other engineers on:
- Using GitLab pipelines and templates.
- Writing safe Terraform changes and reading plan outputs.
- Promote an infra‑as‑code only mindset (no manual portal changes for platform resources).
Requirements
Experience
- 5-8 years in DevOps / Platform Engineering, with significant time on Azure.
- Strong hands‑on experience with Terraform on Azure (modules, multi‑env setups, state backends).
- Proven track record building CI/CD pipelines in GitLab (or similar) for both infra and applications.
Technical skills
- Solid understanding of Azure basics: VNets, NSGs, private endpoints, VPN/ExpressRoute.
- Solid understanding of Azure basics: RBAC, managed identities, Key Vault, Log Analytics.
- Competent in at least one scripting language (e.g. Python, PowerShell, Bash) for automation/glue code.
- Familiarity with DevSecOps practices: Integrating SAST, SCA/OSS, secret scanning, and/or container/IaC scanning into pipelines.
Ways of working
- Comfortable reviewing and improving others Terraform and CI configurations via MRs.
- Strong debugging and troubleshooting skills across infra, pipelines, and cloud services.
- Clear written and verbal communication able to work with infra, security, and application teams.
