Senior Cloud Engineer - Contract

Flagstone; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Flagstone is seeking a senior cloud/infrastructure engineer to drive migration to a new Azure-based cloud platform, building scalable foundations and secure networking for engineering squads.

You will own Terraform/Bicep modules, implement RBAC with Entra ID, and establish gold paths to speed delivery while maintaining strong security and observability across AI workloads.

Qualifications

• Hands-on Azure platform experience across landing zones, networking, identity, and storage.
• Infrastructure-as-code with Terraform and/or Bicep in production contexts.
• Experience with hub-and-spoke networking, private endpoints, and hybrid connectivity.
• Experience building end-to-end CI/CD pipelines with automated security gates.
• Strong knowledge of Entra ID, RBAC, and Azure subscription management.

Responsibilities

• Migrate live services onto the new Azure cloud with zero disruption to production.
• Absorb day-to-day operational support and incident response.
• Author and maintain production-grade Terraform and Bicep modules with testing and drift detection.
• Design landing zones and hub-and-spoke networks for secure connectivity.
• Build integration points for AI tooling and third-party services.
• Define golden paths to reduce delivery cost and accelerate squads.
• Stand up AI platform foundations including AI gateway and observability.
• Build infrastructure pipelines with security scanning and gate approvals.
• Implement RBAC using Entra ID and managed identities.

Skills

Azure platform

Terraform

Bicep

hub-and-spoke networking

CI/CD pipelines

Entra ID / RBAC

migration delivery

architecture decisions

Tools

Terraform

Bicep

Azure DevOps

Job description

What is Flagstone?

Flagstone is many things. An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. And lastly, a thriving, profitable business – where smart people do their best work.

Each definition shares a common thread: our unique culture. It’s our pride and joy. And our competitive advantage.

A feel for our culture

To revolutionise the savings market, we need to be at our best. But high performance takes more than talent – it takes a culture of kindness, respect, and growth.

That’s why we’re building a diverse, inclusive community, where your voice is heard and valued. Where, with close support and room to develop, you can surpass even your own expectations. And be rewarded for it.

We may not change the world, but we can change the world of financial technology. And all it takes is a winning mix of drive, talent, and empathy. Our culture celebrates all three. But enough about us. Let’s talk about you.

About the team

Cloud Engineering builds and runs the new Azure cloud that everything else at Flagstone depends on. It's the foundation for our security tooling, our observability, and the hosting for our AI. The team works in infrastructure-as-code (Terraform and Bicep), owns the landing zones and hub-and-spoke networking, and builds the golden paths that speed up delivery across our engineering squads. They're close to the infrastructure, not abstracted behind a policy layer.

This is a contract role, so we're looking for someone who can hit the ground running. You'll bring immediate impact and add value from day one, working independently without a long ramp-up. Your work will be visible, and the problems you solve will matter.

Does this sound like you?

You're a senior cloud or infrastructure engineer who operates credibly across Azure platform delivery, networking, and infrastructure-as-code, without being narrowly specialised. You're as comfortable owning a migration and the day-to-day support that comes with it as you are designing shared platform foundations for other engineers to build on. You're energised by visible impact, your work matters, and your voice is heard.

What you'll do:

• Migrate live services onto the new Azure cloud, with no disruption to current production systems.

• Absorb day-to-day operational support and incident response, relieving pressure on the permanent team and keeping migration cadence up.

• Author and maintain production-grade Terraform (and Bicep) modules, with testing, validation, versioning, and automated drift detection and remediation.

• Design landing zones, hub-and-spoke network architectures, private endpoint patterns, and hybrid connectivity (ExpressRoute and VPN gateways).

• Build the shared integration "front door" that lets partners and AI tooling integrate quickly and safely.

• Define and roll out golden paths that cut delivery cost and speed up engineering squads.

• Stand up our AI platform foundations: an AI gateway, an observability stack, and hosting for AI tools including Flagstone Concierge, with model access through AWS Bedrock.

• Build and maintain infrastructure pipelines with security scanning, plan validation, and approval gates.

• Implement RBAC using Entra ID, managed identities, and service principals

What you’ll bring:

• Hands-on Azure platform experience across landing zones, networking, identity, and storage.

• Infrastructure-as-code with Terraform and/or Bicep in a production context, including migration between them.

• Practical experience with hub-and-spoke networking, private endpoints, DNS integration, and hybrid connectivity.

• Experience building end-to-end CI/CD pipelines with automated security and compliance gates.

• Solid grasp of Entra ID, RBAC, managed identities, and the Azure subscription and management group hierarchy.

• Comfortable owning both migration delivery and the operational support that runs alongside it.

• Ability to communicate design decisions and trade-offs clearly, through engineering briefs and architectural decision records.

• A growth mindset and genuine curiosity to keep learning.

• Relevant Azure certifications (for example AZ-104 or AZ-305).

• Experience hosting AI workloads, including AI gateways, observability, and model access through AWS Bedrock.

• Experience building golden paths or internal developer platforms.

• Experience working in a similar fintech or financial services environment

All are welcome

At Flagstone, we’re assembling a diverse team that defies our industry’s norms.