The posting
Role Overview We are looking for a resource to support our cloud engineering team. This is enterprise-scale platform work, not single-application DevOps: the client distinguishes clearly between an engineer who builds infrastructure for one application team, and one who builds a platform or self-service system that hundreds of applications and many different teams can consume. Candidates need genuine experience with the latter. Key Responsibilities • Design, build, and maintain enterprise cloud infrastructure and CI/CD pipelines using Terraform and GitHub Actions • Build reusable, self-service platform capabilities consumable by many application teams — not point solutions for a single team • Own the full lifecycle of cloud services: observability, security vulnerability management, and RBAC (role-based access control) • Participate in full SDLC activities, including requirement gathering and enterprise architecture discussions with client stakeholders • Maintain thorough documentation, planning artifacts, and detailed ticket updates for client visibility • Operate within the client's enterprise governance, security, and change-management frameworks as a platform contributor — not just an infrastructure builder Core Technical Skills • Terraform — hands-on Infrastructure-as-Code experience (top priority) • GitHub / GitHub Actions — CI/CD pipeline design and management • Microsoft Azure as primary cloud platform; GCP or AWS experience is a plus but not required • Python, used alongside Terraform for automation and scripting where IaC alone isn't sufficient • YAML for CI/CD pipeline configuration • SQL / PostgreSQL and Azure App Service (service-level cloud skills) • Kubernetes / containerization working knowledge (deep expertise required for at least one team hire — see Preferred below) Requirements Enterprise Cloud Engineering Competencies (Required) This backfill is explicitly for enterprise-level talent, not application-level DevOps — this was the client's number one screening criterion. Candidates must be building platforms consumed by hundreds of applications and many teams, not infrastructure for a single team, and should bring: • True enterprise-scale delivery experience: shared, self-service platforms consumed by many independent application teams, not single-application deployments • Enterprise governance and landing-zone experience: multi-subscription/multi-account structuring, policy-as-code, and consistent tagging/naming standards enforced at scale • Identity and access management at scale: Azure AD/Entra ID, RBAC and least-privilege design, service principal / managed identity governance • Enterprise network architecture: hub-spoke topology, VNet peering, private endpoints, network segmentation • Security posture and compliance for regulated industries: vulnerability management, threat modeling, audit readiness, and comfort with the change-control standards banks impose on vendors • Observability at scale: centralized logging, monitoring, and alerting (Azure Monitor/Log Analytics or equivalent), operating to SLA/SLO expectations • Cost governance / FinOps awareness across many consuming teams • Comfortable operating within formal change-management/ITSM processes (CAB approvals, detailed ticketing discipline) • Resilience and disaster-recovery planning — designing for high availability, since platform outages affect many downstream teams • Architecture-level thinking for platform-level (vs. service-level) engagements — the client considers this non-negotiable at platform scale • Full SDLC fluency, including requirement gathering and enterprise architecture discussions with client stakeholders • Strong written communication: detailed documentation, planning in Excel, and thorough ticket-level updates — enterprise clients expect constant visibility into status • Able to explain technical approach and reasoning in depth; this work is reviewed closely by the client's own in-house architects • Kubernetes / containerization expertise at depth (needed for at least one of the team's hires) • Formal cloud platform experience beyond working knowledge (Azure, GCP, or AWS), e.g., Infrastructure-as-Code / Terraform exposure Preferred / Nice to Have • Prior banking or financial-services experience • Lead-level experience: TL/Architect-level capability plus current hands-on delivery, with proven ability to manage 2–3 engineers



