The posting
Own the platform that carries HR data.
We're building an AI-powered HR platform for Nordic organisations. It covers recruitment, organisation, workforce, payroll, feedback and learning, all on one shared employee record. Our built-in AI drafts and suggests. A person approves.
HR data is about as personal as data gets. Our customers trust us with contracts, absence, pay, and reviews.
The role
This is our first dedicated DevOps role. The foundation is already in place: everything runs on Azure, the infrastructure is in Terraform, and deployments go through Azure DevOps.
What we need now is one person who owns it, from access and secrets to audit logs and recovery. You'll work closely with our CEO, who sets the technical direction, and with a team that builds alongside the HR teams using the product.
What you'll own
- Production infrastructure and access.
- Access control. Separate admin accounts, regular access reviews, and Entra ID PIM and Conditional Access.
- Secrets management. Key Vault only, with expiry, rotation and federated credentials instead of long-lived keys.
- Database access. Review the queries and write scripts that run there.
- Audit logging. One-year retention, with alerts that someone actually reads.
- Certificate renewal.
- Disaster recovery. Not just a plan: tested, and tested again.
Our stack
Area
Tools
Cloud
Azure
IaC
Terraform
CI/CD
Azure DevOps Pipelines
Compute
Azure Container Apps · Docker · Azure Container Registry
Data
PostgreSQL Flexible Server · Blob Storage · Key Vault · App Configuration
Network & edge
VNet · Private endpoints · Azure Front Door with WAF
Monitoring
Application Insights · Log Analytics · OpenTelemetry
Identity
Entra ID · Managed identities
Other
Azure Communication Services
You'll fit in well if you
- Have solid, hands-on experience running production workloads on Azure
- Write and maintain Terraform comfortably, and treat infrastructure changes as code that needs review
- Know Entra ID well: managed identities, PIM, Conditional Access and workload identity federation
- Have run PostgreSQL in production
- Have built CI/CD pipelines, ideally in Azure DevOps
- Treat security and compliance as part of the design, not paperwork afterwards
- Prefer simple and dependable over clever, because a setup the team understands beats one only you understand
- Ready to have fun



