Senior Cloud Engineer

Flagstone; Greater London; Hybrid; GBP 72,000 - 97,000; Full time

Job summary

Flagstone in London is seeking a Senior Cloud/Infrastructure Engineer to migrate live services to a new Azure cloud with minimal disruption. You will own IaC modules (Terraform/Bicep), design landing zones, and implement hub-and-spoke networking with ExpressRoute/VPN.

The role requires strong Azure expertise, RBAC with Entra ID, and experience delivering secure CI/CD pipelines. Your work will include building AI platform foundations and ensuring smooth operational support during migration, in a

Qualifications

• Senior cloud or infrastructure engineer with Azure delivery experience.
• Hands-on Azure across landing zones, networking, identity and storage.

Responsibilities

• Migrate live services onto new Azure cloud with no disruption to production.
• Absorb day-to-day operational support and incident response.
• Author and maintain production-grade Terraform and Bicep modules with testing and drift remediation.
• Design landing zones and hub-and-spoke network architectures with hybrid connectivity.
• Build AI platform foundations including an AI gateway and observability stack.
• Define and roll out golden paths to reduce delivery costs and speed up engineering teams.
• Stand up AI hosting with model access via AWS Bedrock.
• Build and maintain infrastructure pipelines with security scanning and gates.
• Implement RBAC using Entra ID and managed identities.

Skills

Azure platform delivery

Networking

Infrastructure as Code (Terraform/Bice

Azure landing zones

Hub-and-spoke networking

Private endpoints

DNS integration

Hybrid connectivity

CI/CD pipelines

Security gates

Entra ID

RBAC

Managed identities

Migration delivery

Architectural decision records

Growth mindset

Azure certifications (AZ-104/AZ-305)

AI workloads hosting (AWS Bedrock)

Tools

Terraform

Bicep

ExpressRoute

Job description

Salary: £72,000 - 97,000 per year

Requirements

• We are looking for a senior cloud or infrastructure engineer with credible experience across Azure platform delivery, networking, and infrastructure-as-code.
• We need hands‑on Azure platform experience across landing zones, networking, identity, and storage.
• We need practical infrastructure-as-code experience with Terraform and/or Bicep in a production context, including migration between them.
• We need practical experience with hub‑and‑spoke networking, private endpoints, DNS integration, and hybrid connectivity.
• We need experience building end-to-end CI/CD pipelines with automated security and compliance gates.
• We need a solid grasp of Entra ID, RBAC, managed identities, and the Azure subscription and management group hierarchy.
• We need someone comfortable owning both migration delivery and the operational support that runs alongside it.
• We need the ability to communicate design decisions and trade‑offs clearly through engineering briefs and architectural decision records.
• We value a growth mindset and genuine curiosity to keep learning.
• Relevant Azure certifications such as AZ‑104 or AZ‑305 are preferred.
• Experience hosting AI workloads, including AI gateways, observability, and model access through AWS Bedrock, is preferred.
• Experience building golden paths or internal developer platforms is preferred.
• Experience working in a similar fintech or financial services environment is preferred.

Responsibilities

• Migrate live services onto our new Azure cloud with no disruption to current production systems.
• Absorb day‑to‑day operational support and incident response to relieve pressure on the permanent team and keep migration cadence up.
• Author and maintain production‑grade Terraform and Bicep modules, including testing, validation, versioning, and automated drift detection and remediation.
• Design landing zones, hub‑and‑spoke network architectures, private endpoint patterns, and hybrid connectivity through ExpressRoute and VPN gateways.
• Build the shared integration front door that lets partners and AI tooling integrate quickly and safely.
• Define and roll out golden paths that cut delivery cost and speed up our engineering squads.
• Stand up our AI platform foundations, including an AI gateway, an observability stack, and hosting for AI tools such as Flagstone Concierge, with model access through AWS Bedrock.
• Build and maintain infrastructure pipelines with security scanning, plan validation, and approval gates.
• Implement RBAC using Entra ID, managed identities, and service principals.

Technologies

• AI
• AWS
• Azure
• CI/CD
• Cloud
• Support
• Network
• RBAC
• Security
• Terraform
• VPN
• DevOps

More

We are Flagstone, an online savings platform reinventing how individuals, businesses, and charities manage, protect, and grow their cash. We are a diverse, collaborative, and profitable business where smart people do their best work, and our culture of kindness, respect, and growth is a key part of our competitive advantage. Our Cloud Engineering team builds and runs our new Azure cloud, which underpins our security tooling, observability, and AI hosting. This is a contract role based in our London office, working in a hybrid setup within our Engineering department.

last updated 36 week of 2026