Senior Cloud Engineer - Contract

United States Digital Space LLC; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Flagstone is seeking a senior Cloud/Infrastructure Engineer to lead the migration of live services to a new Azure cloud, while maintaining production stability. You will own infrastructure‑as‑code modules (Terraform/Bicep), design landing zones, implement secure hybrid connectivity, and build scalable AI‑ready platforms for internal and partner use.

You’ll work across Azure platform delivery, networking, and security, delivering end‑to‑end CI/CD with governance.

Qualifications

• Hands-on Azure platform experience across landing zones, networking, identity, and storage.
• Infrastructure‑as‑code with Terraform and/or Bicep in a production context, including migration between them.
• Practical experience with hub‑and‑spoke networking, private endpoints, DNS integration, and hybrid connectivity.
• Experience building end‑to‑end CI/CD pipelines with automated security and compliance gates.
• Solid grasp of Entra ID, RBAC, managed identities, and the Azure subscription and management group hierarchy.
• Comfortable owning both migration delivery and the operational support that runs alongside it.
• Ability to communicate design decisions and trade‑offs clearly, through engineering briefs and architectural decision records.
• A growth mindset and genuine curiosity to keep learning.
• Relevant Azure certifications (AZ-104 / AZ-305).
• Experience hosting AI workloads, including AI gateways, observability, and model access through AWS Bedrock.

Responsibilities

• Migrate live services onto the new Azure cloud, with no disruption to current production systems.
• Absorb day‑to‑day operational support and incident response, relieving pressure on the permanent team and keeping migration cadence up.
• Author and maintain production‑grade Terraform (and Bicep) modules, with testing, validation, versioning, and automated drift detection and remediation.
• Design landing zones, hub‑and‑spoke network architectures, private endpoint patterns, and hybrid connectivity (ExpressRoute and VPN gateways).
• Build the shared integration "front door" that lets partners and AI tooling integrate quickly and safely.
• Define and roll out golden paths that cut delivery cost and speed up engineering squads.
• Stand up our AI platform foundations: an AI gateway, an observability stack, and hosting for AI tools including Flagstone Concierge, with model access through AWS Bedrock.
• Build and maintain infrastructure pipelines with security scanning, plan validation, and approval gates.
• Implement RBAC using Entra ID, managed identities, and service principals

Education

AZ-104 / AZ-305 certifications

Tools

Terraform

Bicep

Job description

What is Flagstone

Flagstone is many things. An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. And lastly, a thriving, profitable business – where smart people do their best work.

Each definition shares a common thread: our unique culture. It’s our pride and joy. And our competitive advantage.

A feel for our culture

To revolutionise the savings market, we need to be at our best. But high performance takes more than talent – it takes a culture of kindness, respect, and growth.

That’s why we’re building a diverse, inclusive community, where your voice is heard and valued. Where, with close support and room to develop, you can surpass even your own expectations. And be rewarded for it.

We may not change the world, but we *can* change the world of financial technology. And all it takes is a winning mix of drive, talent, and empathy. Our culture celebrates all three.

But enough about us. Let’s talk about you.

About the team

Cloud Engineering builds and runs the new Azure cloud that everything else at Flagstone depends on. It's the foundation for our security tooling, our observability, and the hosting for our AI. The team works in infrastructure-as-code (Terraform and Bicep), owns the landing zones and hub-and-spoke networking, and builds the golden paths that speed up delivery across our engineering squads. They're close to the infrastructure, not abstracted behind a policy layer.

This is a contract role, so we're looking for someone who can hit the ground running. You'll bring immediate impact and add value from day one, working independently without a long ramp-up. Your work will be visible, and the problems you solve will matter.

Does this sound like you

You're a senior cloud or infrastructure engineer who operates credibly across Azure platform delivery, networking, and infrastructure-as-code, without being narrowly specialised. You're as comfortable owning a migration and the day‑to‑day support that comes with it as you are designing shared platform foundations for other engineers to build on. You're energised by visible impact, your work matters, and your voice is heard.

What you'll do

• Migrate live services onto the new Azure cloud, with no disruption to current production systems.
• Absorb day‑to‑day operational support and incident response, relieving pressure on the permanent team and keeping migration cadence up.
• Author and maintain production‑grade Terraform (and Bicep) modules, with testing, validation, versioning, and automated drift detection and remediation.
• Design landing zones, hub‑and‑spoke network architectures, private endpoint patterns, and hybrid connectivity (ExpressRoute and VPN gateways).
• Build the shared integration "front door" that lets partners and AI tooling integrate quickly and safely.
• Define and roll out golden paths that cut delivery cost and speed up engineering squads.
• Stand up our AI platform foundations: an AI gateway, an observability stack, and hosting for AI tools including Flagstone Concierge, with model access through AWS Bedrock.
• Build and maintain infrastructure pipelines with security scanning, plan validation, and approval gates.
• Implement RBAC using Entra ID, managed identities, and service principals

What you’ll bring

• Hands‑on Azure platform experience across landing zones, networking, identity, and storage.
• Infrastructure‑as‑code with Terraform and/or Bicep in a production context, including migration between them.
• Practical experience with hub‑and‑spoke networking, private endpoints, DNS integration, and hybrid connectivity.
• Experience building end‑to‑end CI/CD pipelines with automated security and compliance gates.
• Solid grasp of Entra ID, RBAC, managed identities, and the Azure subscription and management group hierarchy.
• Comfortable owning both migration delivery and the operational support that runs alongside it.
• Ability to communicate design decisions and trade‑offs clearly, through engineering briefs and architectural decision records.
• A growth mindset and genuine curiosity to keep learning.
• Relevant Azure certifications (for example AZ-104 or AZ-305).
• Experience hosting AI workloads, including AI gateways, observability, and model access through AWS Bedrock.
• Experience building golden paths or internal developer platforms.
• Experience working in a similar fintech or financial services environment

All are welcome

At Flagstone, we’re assembling a diverse team that defies our industry’s norms. Think this role could suit you? We encourage you to apply, no matter your background.