Senior Cloud Engineer - Contract

Flagstone; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Flagstone is seeking a senior cloud/infrastructure engineer to own Azure platform delivery, network design, and infrastructure-as-code improvements. You’ll migrate live services, maintain robust CI/CD pipelines, and build scalable golden paths for engineering squads.

The role emphasizes visible impact, independent work, and collaboration across a fintech environment. Experience with migration, security gating, and AI hosting is highly valued.

Qualifications

• Hands-on Azure experience across landing zones, networking, identity, and storage.
• IaC in production using Terraform and/or Bicep; migration experience.
• Experience building end-to-end CI/CD pipelines with security gates.

Responsibilities

• Migrate live services onto the new Azure cloud with no production disruption.
• Absorb daily operational support and incident response during migration.
• Develop and maintain production-grade Terraform/Bicep modules with drift detection.
• Design landing zones and hub‑and‑spoke networks, including private endpoints and hybrid connectivity.
• Build shared integration front doors to enable rapid partner and AI tooling integration.
• Define and roll out golden paths to reduce delivery cost and speed up squads.
• Set up AI platform foundations: AI gateway, observability, and hosting for AI tools (Flagstone Concierge) via AWS Bedrock.
• Develop infrastructure pipelines with security scanning, plan validation, and approval gates.

Skills

Azure platform

Terraform

Bicep

Networking (hub-and-spoke)

CI/CD pipelines

RBAC / Entra ID

Migration delivery

Hybrid connectivity

Azure security tooling

AI/ML infra experience

Education

Azure certifications (AZ-104, AZ-305)

Tools

Terraform

Bicep

ExpressRoute

VPN gateways

Azure

AWS Bedrock

Job description

What is Flagstone?

Flagstone is many things. An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. And lastly, a thriving, profitable business - where smart people do their best work.

Each definition shares a common thread: our unique culture. It's our pride and joy. And our competitive advantage.

A feel for our culture:

To revolutionise the savings market, we need to be at our best. But high performance takes more than talent - it takes a culture of kindness, respect, and growth.

That's why we're building a diverse, inclusive community, where your voice is heard and valued. Where, with close support and room to develop, you can surpass even your own expectations. And be rewarded for it.

We may not change the world, but we can change the world of financial technology. And all it takes is a winning mix of drive, talent, and empathy. Our culture celebrates all three. But enough about us. Let's talk about you.

About the team

Cloud Engineering builds and runs the new Azure cloud that everything else at Flagstone depends on. It's the foundation for our security tooling, our observability, and the hosting for our AI. The team works in infrastructure-as-code (Terraform and Bicep), owns the landing zones and hub-and-spoke networking, and builds the golden paths that speed up delivery across our engineering squads. They're close to the infrastructure, not abstracted behind a policy layer.

This is a contract role, so we're looking for someone who can hit the ground running. You'll bring immediate impact and add value from day one, working independently without a long ramp-up. Your work will be visible, and the problems you solve will matter.

Does this sound like you?

You're a senior cloud or infrastructure engineer who operates credibly across Azure platform delivery, networking, and infrastructure-as-code, without being narrowly specialised. You're as comfortable owning a migration and the day-to-day support that comes with it as you are designing shared platform foundations for other engineers to build on. You're energised by visible impact, your work matters, and your voice is heard.

What you'll do:

• Migrate live services onto the new Azure cloud, with no disruption to current production systems.
• Absorb day-to-day operational support and incident response, relieving pressure on the permanent team and keeping migration cadence up.
• Author and maintain production-grade Terraform (and Bicep) modules, with testing, validation, versioning, and automated drift detection and remediation.
• Design landing zones, hub-and-spoke network architectures, private endpoint patterns, and hybrid connectivity (ExpressRoute and VPN gateways).
• Build the shared integration "front door" that lets partners and AI tooling integrate quickly and safely.
• Define and roll out golden paths that cut delivery cost and speed up engineering squads.
• Stand up our AI platform foundations: an AI gateway, an observability stack, and hosting for AI tools including Flagstone Concierge, with model access through AWS Bedrock.
• Build and maintain infrastructure pipelines with security scanning, plan validation, and approval gates.
• Implement RBAC using Entra ID, managed identities, and service principals

What you’ll bring:

• Hands-on Azure platform experience across landing zones, networking, identity, and storage.
• Infrastructure-as-code with Terraform and/or Bicep in a production context, including migration between them.
• Practical experience with hub-and-spoke networking, private endpoints, DNS integration, and hybrid connectivity.
• Experience building end-to-end CI/CD pipelines with automated security and compliance gates.
• Solid grasp of Entra ID, RBAC, managed identities, and the Azure subscription and management group hierarchy.
• Comfortable owning both migration delivery and the operational support that runs alongside it.
• Ability to communicate design decisions and trade-offs clearly, through engineering briefs and architectural decision records.
• A growth mindset and genuine curiosity to keep learning.
• Relevant Azure certifications (for example AZ-104 or AZ-305).
• Experience hosting AI workloads, including AI gateways, observability, and model access through AWS Bedrock.
• Experience building golden paths or internal developer platforms.
• Experience working in a similar fintech or financial services environment

All are welcome

At Flagstone, we're assembling a diverse team that defies our industry's norms.