DevOps/Platform Engineer

MET Group; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

MET Group in Madrid is expanding its MET Retail division, building a technology-driven, customer-first platform for power and gas. We are seeking a DevOps/Platform Engineer to own the Azure-based environments and automation across delivery squads.

You will design and operate IaC (Terraform or Bicep), CI/CD pipelines, CIAM and API governance, and ensure secure, scalable deployments from development through production, with a focus on observability and cost controls.

Formación

• Experience building Azure-based environments from the ground up.
• Hands-on IaC with Terraform or Bicep.
• Deep experience with Azure DevOps and GitHub Actions for CI/CD.
• Experience running containerised workloads (Azure Container Apps / AKS) and API gateways.
• Experience implementing CIAM / customer identity (Entra External ID, Azure AD B2C, Auth0).
• Strong cloud security, secrets management, networking and cost controls.
• Able to own a greenfield platform end-to-end.
• English required; Spanish/Italian/French a plus.

Responsabilidades

• Stand up and own the Azure landing zone: subscriptions, networking, identity, policy, cost controls and environment topology.
• Build infrastructure-as-code (Terraform or Bicep) for reproducible environments.
• Design and operate CI/CD pipelines in Azure DevOps / GitHub for backend, web and mobile, with tests and release gates.
• Set up and operate CIAM — Entra External ID or equivalent — sign-up/sign-in, consent, MFA and token flows.
• Establish the mobile release pipeline: Expo EAS build and submit, Apple and Google developer accounts, code signing and OTA updates.
• Provide the container platform (Azure Container Apps) and the API gateway (Azure API Management) in front of the canonical API, with secrets management.
• Provision managed SQL and data services, backups, and secure connectivity.
• Stand up observability — logging, metrics, tracing, dashboards and alerting; incident and on-call foundations.
• Codify security and guardrails as policy and pipeline checks.
• Enable squads with golden-path templates, developer documentation and self-service.

Conocimientos

Azure expertise

Infrastructure as code (Terraform/Bice

Azure DevOps / GitHub Actions

Containerised workloads (Azure CA / AK

API gateway (Azure API Management)

CIAM / customer identity

Cloud security & cost management

Ownership of greenfield platform

English required; multilingual a plus

Herramientas

Terraform

Bicep

Azure DevOps

GitHub Actions

Azure Container Apps

AKS

Azure API Management

Entra External ID

Azure AD B2C

Auth0

Descripción del empleo

MET Group is an integrated European energy company headquartered in Switzerland, active across the full value chain - generation, storage, LNG, trading and sales. Present in 24 countries and 33 national energy markets, MET combines large-scale trading with a growing portfolio of renewable and flexible assets. In 2025 the group generated €28.6 billion in consolidated revenue.

MET Retail is a new chapter for the group: bringing energy directly to households. We're building a technology-driven retail platform for power and gas, with a digital, customer-first model. One model, built to scale across Europe. We're a small international team, and there's a lot to build. Join us on this exciting journey and you'll help shape how this company works, with real ownership from day one.

Job Description

Reporting to the IT Director, works across both delivery squads and closely with the Principal Developer/Solution Architect, Security, and the legacy platform team.

Key Responsibilities

• Stand up and own the Azure landing zone: subscriptions, networking, identity, policy, cost controls and environment topology (dev, test, staging, production).
• Build everything as infrastructure-as-code (Terraform or Bicep) so every environment is reproducible, reviewed and version-controlled.
• Design and operate CI/CD pipelines in Azure DevOps / GitHub for backend, web and mobile, including automated testing and release gates.
• Set up and operate customer identity (CIAM) — Entra External ID or equivalent — covering sign-up/sign-in, consent, MFA and token flows, in partnership with the Principal and Security.
• Establish the mobile release pipeline: Expo EAS build and submit, Apple and Google developer accounts, code signing and over-the-air update channels.
• Provide the container platform (Azure Container Apps) and the API gateway (Azure API Management) in front of the canonical API, with secrets and key management.
• Provision managed SQL and data services, backups, and secure connectivity to the legacy platform and third-party providers.
• Stand up observability — logging, metrics, tracing, dashboards and alerting — and the incident and on-call foundations.
• Codify security and guardrails as policy and pipeline checks, so standards are enforced rather than advised.
• Enable the squads with golden-path templates, developer documentation and self-service — a paved road others can build on.

Qualifications

• Proven experience as a DevOps, Platform or Cloud/Infrastructure Engineer building environments from the ground up on Azure.
• Strong hands-on infrastructure-as-code with Terraform or Bicep.
• Deep experience with Azure DevOps and/or GitHub Actions for CI/CD across multiple runtimes.
• Experience running containerised workloads (Azure Container Apps / AKS) and API gateways (Azure API Management).
• Experience implementing CIAM / customer identity (Entra External ID, Azure AD B2C, Auth0 or similar).
• Solid grounding in cloud security, secrets management, networking and cost management.
• Comfortable being the single owner of a greenfield platform, making pragmatic build-vs-buy calls with limited support.
• Professional written and spoken English is required. Spanish, Italian or French are considered as a plus