Role Summary
The engineer who keeps the POD independent and production-ready — owning deployment, CI/CD, observability, identity and secrets on top of the central platform’s golden paths, so the team can ship without waiting on anyone.
Key Responsibilities
- Own CI/CD pipelines and containerized deployments to AKS for all POD services.
- Manage infrastructure as code and extend the central platform’s paved-road templates rather than diverging from them.
- Operate observability with Grafana (and the central metrics/logging stack); define alerts and SLOs.
- Integrate identity (Auth0) and secrets management (Azure Key Vault) into services.
- Own reliability, cost and security posture for the POD’s Azure footprint; support incident response.
Must-have Skills & Technologies
- Microsoft Azure and Kubernetes (AKS): deployments, networking, autoscaling.
- CI/CD (Azure DevOps or GitHub Actions) and infrastructure as code (Terraform, Bicep or Helm).
- Observability: Grafana, Prometheus / Azure Monitor; logging and tracing.
- Identity and secrets: Auth0, Azure Key Vault; service-to-service auth.
- Docker and container security fundamentals.
Prior Experience
- 5+ years in DevOps / platform / SRE roles, with production Kubernetes on Azure.
- Track record building CI/CD and IaC that other engineers self-serve.
Nice to Have
- Platform-engineering / golden-path experience; FinOps and cost optimisation.
- Security hardening, policy-as-code (OPA), and compliance in regulated environments.
