DevOps Engineer – Entra External ID & Observability (Azure)

Digital Forms; Województwo mazowieckie; Remoto; PLN 180.000 - 240.000; Tempo pieno

Descrizione del lavoro

Digital Forms seeks a hands-on DevOps Engineer to take over the identity and observability workstream on a live enterprise Azure programme. The engagement is fully remote with clients in the US, EU and UK, starting ASAP for a 3‑month, 50–100% FTE engagement.

You’ll configure Entra External ID for CIAM, build Azure Functions with managed identity and Key Vault, set up monitoring with Application Insights and OpenTelemetry, and maintain Terraform code and Azure DevOps pipelines while collaborating

Competenze

• Hands-on experience configuring Entra External ID for customer-facing applications (CIAM).
• Solid understanding of OAuth2, OIDC and JWT end-to-end flows.
• Azure Functions secured with managed identity and Key Vault.
• PII-safe logging with Application Insights, Log Analytics and OpenTelemetry.
• Terraform on Azure and Azure DevOps Pipelines.
• English at least B2+ for client sessions.

Mansioni

• Configure and extend Entra External ID for CIAM on the live Azure programme.
• Build and secure Azure Functions with managed identity and Key Vault.
• Troubleshoot token flows across OAuth2/OIDC/JWT integrations.
• Set up monitoring, alerts and dashboards with Application Insights and OpenTelemetry.
• Maintain Terraform code and Azure DevOps pipelines and participate in client sessions.

Conoscenze

Entra External ID CIAM

OAuth2/OIDC/JWT

Azure Functions

Application Insights

Log Analytics

OpenTelemetry

Terraform

Azure DevOps

English B2+

Formazione

Relevant IT degree or Azure certification

Strumenti

Terraform

Azure DevOps

Key Vault

Microsoft Graph API

Entra ID

Descrizione del lavoro

About the role

At Digital Forms we deliver digital transformation projects for clients in the US, EU and UK. We’re looking for a hands‑on DevOps Engineer to take over the identity and observability workstream on a live enterprise Azure programme.

The platform is new and in active delivery, with go‑live planned for January 2027. The Azure foundation (landing zones, networking, central logging) is already built. The remaining work covers customer identity, Azure Functions and application observability, and that’s where you come in.

You’ll implement, test and document solutions within the architecture decisions made by our Solution Architect and the client’s architecture governance, and join client technical sessions.

What you’ll do

• Configure and extend Entra External ID (CIAM): user flows, app registrations, custom authentication extensions, claims, Microsoft Graph API


• Build and secure Azure Functions (HTTP/webhook) with managed identity and Key Vault


• Troubleshoot token flows and claims across OAuth2 / OIDC / JWT integrations, including On‑Behalf‑Of


• Set up monitoring, alerting and dashboards with Application Insights, Log Analytics (KQL) and OpenTelemetry, keeping logs free of personal data


• Maintain the related Terraform code and Azure DevOps pipelines

Must-have

• Hands‑on experience configuring Entra External ID for customer‑facing applications (CIAM). Azure AD B2C counts as adjacent experience only, and workforce/internal Entra ID (employee access, PIM, Conditional Access) on its own is not enough for this role.


• Solid understanding of OAuth2, OIDC and JWT. You can trace a missing or incorrect claim end to end.


• Azure Functions secured with managed identity and Key Vault


• Application Insights, Log Analytics (KQL), OpenTelemetry, alerts and dashboards, PII‑safe logging


• Terraform on Azure and Azure DevOps Pipelines


• English B2+ (spoken), for regular client technical sessions

Engagement

• B2B contract


• 3 months, 50–100% FTE


• Fully remote


• Start: ASAP