You will be a senior member of the Azure Cloud Team, responsible for designing, building, and operating the CI/CD and Infrastructure‑as‑Code (IaC) layer that underpins Dymon’s Azure cloud platform. You’ll own the Terraform + GitLab toolchain for management groups, subscriptions, networks, shared services, and application landing zones, and help embed DevSecOps practices into every pipeline.

Key responsibilities

1. Terraform & environment automation

• Design and implement Terraform modules for Azure:
• Management groups, subscriptions, RBAC.Hub‑and‑spoke VNets, firewalls, private endpoints.Shared services: Key Vault, Log Analytics/Grafana, storage, container apps, data platform components.
• Manage remote state, workspaces, module versioning, and promote changes safely across dev/qa/prod.

2. GitLab CI/CD for infrastructure

• Build and maintain GitLab CI pipelines for infra:
• Stages for fmt / validate / plan / apply (non‑prod and gated prod).MR‑driven workflows with terraform plan comments, approvals, and controlled apply.
• Create reusable CI templates so app/data teams can easily consume standard jobs (infra, deploy, smoke tests).

3. Application CI/CD enablement

• Work with app and data teams to:
• Integrate their repos with GitLab CI templates (build, test, deploy).Wire deployments into Azure landing zones (App Service / Container Apps / Functions / Databricks, etc.).
• Implement environment patterns (Dev/QA/UAT/Prod) aligned to the new subscription and VNet structure.

4. DevSecOps integration

• Integrate security scanning tools into CI pipelines (e.g. Jfrog Advanced Security, SAST/SCA/IaC scanners).
• Help define policies and thresholds for blocking promotions based on vulnerability severity.
• Collaborate with Security/Infra to ensure that pipelines enforce guardrails by default (e.g. policy checks, image/IaC scans).

5. Reliability, observability & optimization

• Integrate pipelines with monitoring/alerting (Azure Monitor, Log Analytics, Grafana) for both infra and apps.
• Contribute to cost optimization:
• Patterns for auto‑shutdown of non‑prod.Standardized scaling and sizing parameters in Terraform modules.
• Participate in incident response and post‑mortems, improving pipeline resilience and roll‑back strategies.

6. Standards, coaching & documentation

• Document CI/CD patterns, Terraform module usage, and “how‑to” guides for engineers.
• Coach developers and other engineers on:
• Using GitLab pipelines and templates.Writing safe Terraform changes and reading plan outputs.
• Promote an “infra‑as‑code only” mindset (no manual portal changes for platform resources).

Requirements

• 5–8 years in DevOps / Platform Engineering, with significant time on Azure.
• Strong hands‑on experience with Terraform on Azure (modules, multi‑env setups, state backends).Proven track record building CI/CD pipelines in GitLab (or similar) for both infra and applications.
• Comfortable reviewing and improving others’ Terraform and CI configurations via MRs.
• Strong debugging and troubleshooting skills across infra, pipelines, and cloud services.Clear written and verbal communication; able to work with infra, security, and application teams.

Technical skills

Solid understanding of Azure basics

- VNets, NSGs, private endpoints, VPN/ExpressRoute
- RBAC, managed identities, Key Vault, Log Analytics.

Competent in at least one scripting language (e.g. Python, PowerShell, Bash) for automation/glue code.

Familiarity with DevSecOps practices

- Integrating SAST, SCA/OSS, secret scanning, and/or container/IaC scanning into pipelines.