Job Specification

Role Title: Cloud DevSecOps / Infrastructure Automation Engineer

Role Purpose

The Cloud DevSecOps / Infrastructure Automation Engineer will be responsible for designing, implementing, and maintaining automated cloud infrastructure and security frameworks within Microsoft Azure environments. The role focuses on Infrastructure-as-Code (IaC), DevSecOps automation, CI/CD pipeline optimisation, and secure cloud networking. The successful candidate will work closely with product, engineering, and security teams to ensure infrastructure deployments are scalable, secure, and compliant with industry best practices.

Key Responsibilities / Deliverables

The following non-exhaustive list of key deliverables applies to this role:

Infrastructure Automation

• Develop Infrastructure-as-Code (IaC) automation, particularly using Terraform, to create reusable infrastructure patterns and modules.

• Implement automated provisioning and management of infrastructure resources across cloud environments.

DevOps and CI/CD

• Utilize modern DevOps and CI/CD tooling such as Azure DevOps, Git, YAML, and equivalent tools to automate infrastructure deployments and prevent configuration drift.

• Support the design, development, implementation, and optimisation of standardised CI/CD pipelines to promote software across environments with validation and operational gating.

• Adapt CI/CD processes to meet the requirements of multiple product teams while ensuring compliance with security and quality gates.

• Select, deploy, and maintain appropriate DevSecOps tooling to support continuous delivery.

• Evaluate and trial new platforms, frameworks, tools, and languages to improve CI/CD workflows.

Cloud Infrastructure & Networking

• Investigate and resolve complex cloud infrastructure issues, recommending and implementing improvements.

• Design, implement, and maintain network infrastructure across multi-region and multi-cloud environments.

• Work with Azure networking technologies including V-WAN, VNET, BGP, and related services.

Security & Policy Automation

• Develop and enforce Policy-as-Code (PaC) for Azure environments to configure, detect, remediate, and enforce security standards.

• Implement security policies aligned with industry frameworks such as CIS and NIST benchmarks.

• Manage firewall technologies and develop automation workflows for network firewall management, integrating these into the wider security architecture.

Collaboration & Delivery

• Support product and engineering teams in adopting DevSecOps automation and best practices.

• Assist in the rollout and deployment of new product features and infrastructure changes to support rapid development cycles.

• Document engineering processes, infrastructure designs, and re-engineering solutions where required.

Key Experience, Competencies & Skillsets

Essential Experience

• Proven experience working with Microsoft Azure cloud platforms.

• Demonstrated experience in cloud networking automation.

• Strong experience implementing Infrastructure-as-Code using Terraform.

• Hands-on experience with Azure networking technologies such as V-WAN, VNET, and BGP.

• Proven knowledge and practical experience in DevSecOps concepts and implementation.

• Strong experience developing and managing CI/CD pipelines to deploy infrastructure and applications using tools such as:

• Azure DevOps

• GitHub / GitHub Actions

• Jenkins

• Equivalent CI/CD platforms

• Experience managing infrastructure environments, configurations, and IaC scripts to support application workflows via self-service automation.

Technical Skills

• Strong understanding of multi-region and multi-cloud network architecture design and implementation.

• Proficiency in scripting and automation languages such as:

• Python

• PowerShell

• YAML

• Ruby

• Perl

• KQL or similar

• Experience working with testing automation frameworks and harnesses.

• Understanding of Policy-as-Code and enforcement of security controls via IaC.

Delivery Methodologies

• Experience working within both Waterfall and Agile delivery environments, including:

• Scrum

• Kanban

• SAFe

Additional Attributes

• Strong analytical and problem-solving skills.

• Ability to troubleshoot complex infrastructure issues.

• Excellent documentation and communication skills.

• Ability to work collaboratively across engineering, security, and product teams.