DevOps Engineer

Brio Digital Limited; Leeds; Hybrid; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Brio Digital Limited is seeking an experienced Azure DevOps Engineer to own infrastructure, environments and pipelines through migration, hardening and governance for a live digital health platform.

You will manage multi-environment configurations (Dev/QA/Demo/Train/Prod), perform tenant migration tasks and implement secure, compliant DevOps practices in a regulated NHS/public sector context.

Qualifications

• Extensive Azure DevOps experience in regulated environments.
• Experience with tenant migrations and cloud platform hardening.
• Strong scripting and IaC skills with Bicep and Terraform.
• Familiarity with OpenID, Keycloak and external identity providers.

Responsibilities

• Complete tenant migration work including infrastructure alignment and DNS.
• Prepare platform for next Azure migration phase, including networking and pipelines.
• Manage Dev, QA, Demo, Training and Production environments with containers and secrets.
• Create test environments for testing team and a performance test environment.
• Restructure Demo environment to enable tester DB access.
• Maintain disaster recovery model with failover and routing during outages.
• Deliver platform hardening and remediate pentest findings.
• Manage IAM, deployment permissions, DNS and user offboarding.
• Produce infrastructure documentation in line with governance.

Skills

Azure DevOps

Terraform

Bicep

GitHub Actions

Azure Networking

IAM & SSO (OpenID)

Security Hardening

DR/Failover Planning

Tools

GitHub Actions

Terraform

Azure DevOps

Bicep

Front Door

Key Vault

Job description

Location: Leeds or London (hybrid, 2 days per week on site)

Duration: 6 months, with a strong likelihood of extension

Start: ASAP / TBC

The Role

Brio Partners is working with a national health organisation to find an experienced Azure DevOps Engineer to support a live digital health platform. You will own infrastructure, environments and pipelines through tenant migration, the next phase of Azure migration and ongoing platform hardening, in a regulated and secure environment.

Key Responsibilities

• Complete the remaining tenant migration work, including infrastructure alignment, DNS and environment configuration.
• Prepare the platform for its next Azure migration phase, covering infrastructure readiness, networking, environment alignment and pipeline updates.
• Set up and manage the Dev, QA, Demo, Training and Production environments, including container configuration, environment variables and secrets.
• Build dedicated test environments for the testing team and maintain a performance testing environment.
• Restructure the Demo environment so testers can access the database.
• Maintain and test the disaster recovery model, including failover, static fallback pages and Front Door routing during outages.
• Deliver outstanding platform hardening and act on penetration testing findings.
• Manage IAM, deployment permissions, DNS records and user offboarding within the subscription.
• Produce clear infrastructure documentation in line with governance controls.
• Strong hands-on Microsoft Azure experience, including networking, Front Door, Container Apps, Key Vault, DNS and Storage (including static site hosting).
• Infrastructure as Code with Bicep. Terraform is also required, as some areas are mid-migration.
• CI/CD with GitHub Actions and Azure DevOps pipelines, including secure deployment patterns and environment promotion.
• Identity and authentication with Keycloak, OpenID and external identity providers.
• Certificate management, domain verification and CNAME mapping.
• Experience designing or supporting DR and failover for cloud-hosted services.
• Background working in regulated or secure environments.
• NHS or public sector digital platform experience.
• Tenant-to-tenant or Azure migration projects.
• Security hardening and remediation of penetration test findings.

Why Apply?

This is a hands-on role on a live national health platform. The work is varied, covering migration, DR and security, and the contract has a strong prospect of extension. You can be hybrid from either Leeds or London.