DevOps Engineer – Entra External ID & Observability (Azure)

Digital Forms; Polska; Ibrido; PLN 165.000 - 248.000; Tempo pieno

Descrizione del lavoro

Digital Forms delivers digital transformation projects for clients in the US, EU and UK. We’re looking for a hands-on DevOps Engineer to own the identity and observability workstream on a live enterprise Azure programme.

The platform is new and in active delivery, with go-live planned for January 2027. You’ll implement, test and document solutions within the architecture decisions and join client technical sessions.

Competenze

• Hands-on experience with Entra External ID (CIAM) including user flows and app registrations.
• Solid understanding of OAuth2, OIDC, JWT and token exchange flows.
• Azure Functions with managed identity and Key Vault integration.
• Experience with observability tools like Application Insights and OpenTelemetry.
• Terraform on Azure and Azure DevOps Pipelines.
• Proficient English (C1 level).

Mansioni

• Configure and extend Entra External ID (CIAM): user flows, app registrations, claims.
• Build and secure Azure Functions (webhook/HTTP, managed identity, Key Vault).
• Set up monitoring, alerting and dashboards with Application Insights and OpenTelemetry.
• Maintain Terraform code and Azure DevOps pipelines.
• Troubleshoot token flows and OAuth2/OIDC integrations.

Conoscenze

Entra External ID

OAuth2/OIDC/JWT

Azure Functions

Observability concepts

PII-safe logging

English (C1)

Strumenti

Terraform

Azure DevOps

Application Insights

Log Analytics

OpenTelemetry

Key Vault

Microsoft Graph API

Descrizione del lavoro

Description

At Digital Forms we deliver digital transformation projects for clients in the US, EU and UK. We’re looking for a hands-on DevOps Engineer to take over the identity and observability workstream on a live enterprise Azure programme.

The platform is new and in active delivery, with go-live planned for January 2027. The Azure foundation (landing zones, networking, central logging) is already built. The remaining work covers identity, Azure Functions and application observability, and that’s where you come in.

You’ll implement, test and document solutions within the architecture decisions made by our Solution Architect and the client’s architecture governance. You’ll also join client technical sessions.

What you’ll do

• Configure and extend Entra External ID (CIAM): user flows, app registrations, custom authentication extensions, claims

• Build and secure Azure Functions (webhook/HTTP, managed identity, Key Vault)

• Set up monitoring, alerting and dashboards with Application Insights, Log Analytics and OpenTelemetry

• Maintain the related Terraform code and Azure DevOps pipelines

• Troubleshoot token flows and claims across OAuth2 / OIDC integrations

Requirements

• Hands-on experience with Entra External ID (CIAM): user flows, app registrations, custom authentication extensions, claims, Microsoft Graph API (Azure AD B2C experience is a plus, but not a substitute)

• Solid understanding of OAuth2, OIDC, JWT and On-Behalf-Of flows, including claim troubleshooting

• Azure Functions with managed identity and Key Vault

• Observability: Application Insights, Log Analytics (KQL), OpenTelemetry, alerts, dashboards, PII-safe logging

• Terraform on Azure and Azure DevOps Pipelines

• English at C1 level

What we offer

• B2B contract, 3-month project (with extension potential)

• 50–100% engagement

• 100% remote, no travel required

• Flexible hours (no fixed overlap required)

• A modern Azure programme for an enterprise client, with a clear architecture already in place