Devops Engineer

Caspian One; Greater London; On-site; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Ownership & technical influence

Direct access to senior leadership

Exposure to cloud, data & AI projects

Job summary

Caspian One is seeking a hands-on DevOps Specialist with strong Azure experience to help shape and scale our Azure platform for engineering, data, and AI workloads. You’ll work with senior technology stakeholders to set cloud standards, governance, and secure, scalable architectures across landing zones, networking, and IAM.

The role requires expertise in Terraform/Bicep, Entra ID, RBAC and policy-driven governance, with a focus on cost optimization and security best practices.

Qualifications

• Strong experience designing and operating Azure platforms in enterprise environments.
• Hands-on experience with Azure Landing Zones, governance and security controls.
• Experience building infrastructure using Terraform and/or Bicep.
• Good understanding of Azure networking, identity and access management.
• Experience with Entra ID, RBAC, Conditional Access and privileged access controls.
• Scripting and automation skills using Python, PowerShell and/or Bash.
• Experience implementing governance frameworks, policy controls and security best practices.
• Strong communication skills and the ability to work closely with technical and non-technical stakeholders.
• Experience delivering AWS to Azure migrations.
• Experience within financial services or other regulated environments.
• Knowledge of NIST, CIS or similar security frameworks.
• Exposure to AI governance and security controls.
• Microsoft cloud certifications.

Responsibilities

• Design, build and support Azure landing zones, management groups and subscription structures.
• Develop and maintain infrastructure as code using Terraform and/or Bicep.
• Build reusable platform services, standards and deployment patterns.
• Manage Azure identity and access management, including Entra ID, RBAC and privileged access controls.
• Design and support secure cloud networking solutions, including hybrid connectivity and private networking.
• Implement governance controls, Azure Policy and compliance automation.
• Monitor and optimise cloud usage and costs.
• Support data and AI platforms, including Azure Databricks environments.
• Collaborate with internal teams and third-party providers to improve platform capability and operational standards.
• Produce documentation, standards and guidance to support wider engineering teams.

Skills

Azure Platform Design

Entra ID

RBAC

Conditional Access

Azure Networking

Python

PowerShell

Security Governance

NIST/CIS Knowledge

Stakeholder Communications

AI Governance

Azure Migrations

Tools

Terraform

Bicep

Job description

We're working with an investment management firm that is growing its internal cloud engineering capability and is looking to hire a Devops Specialist with strong Azure experience.

This is a hands‑on position where you'll play a key role in building and developing the firm's Azure platform. Working closely with senior technology stakeholders, you'll help establish cloud standards, improve governance, and provide a secure, scalable platform for engineering, data and AI workloads.

Responsibilities;

• Design, build and support Azure landing zones, management groups and subscription structures.
• Develop and maintain infrastructure as code using Terraform and/or Bicep.
• Build reusable platform services, standards and deployment patterns.
• Manage Azure identity and access management, including Entra ID, RBAC and privileged access controls.
• Design and support secure cloud networking solutions, including hybrid connectivity and private networking.
• Implement governance controls, Azure Policy and compliance automation.
• Monitor and optimise cloud usage and costs.
• Support data and AI platforms, including Azure Databricks environments.
• Collaborate with internal teams and third-party providers to improve platform capability and operational standards.
• Produce documentation, standards and guidance to support wider engineering teams.

Requirements;

• Strong experience designing and operating Azure platforms in enterprise environments.
• Hands‑on experience with Azure Landing Zones, governance and security controls.
• Experience building infrastructure using Terraform and/or Bicep.
• Good understanding of Azure networking, identity and access management.
• Experience with Entra ID, RBAC, Conditional Access and privileged access controls.
• Scripting and automation skills using Python, PowerShell and/or Bash.
• Experience implementing governance frameworks, policy controls and security best practices.
• Strong communication skills and the ability to work closely with technical and non-technical stakeholders.
• Experience delivering AWS to Azure migrations.
• Experience within financial services or other regulated environments.
• Knowledge of NIST, CIS or similar security frameworks.
• Exposure to AI governance and security controls.
• Microsoft cloud certifications.

What's on Offer;

• Opportunity to play a key role in shaping a growing Azure platform.
• Direct access to senior technology leadership.
• High level of ownership and technical influence.
• Exposure to cloud, data and AI initiatives within a modern engineering environment.