> Markdown version of [/jobs/ext/2796905-senior-cloud-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/2796905-senior-cloud-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Infrastructure Engineer - **Company:** Hargreaves Lansdown - **Location:** Bristol, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Performance Management, Automation of Tests, Microsoft Azure, Microsoft Online Services, Cloud Computing, Databases, Continuous Integration, DevOps, Github, Identity and Access Management, Key Management, Log Analysis, Systems Development Life Cycle, Role-Based Access Control, Release Management, Site Reliability Engineering Practices, Management of Software Versions, Datadog, Policy as Code, Microsoft Power Automate, Cloud Monitoring, Autoscaling, Grafana, Event Driven Architecture, Kubernetes, Bicep, Hashicorp, Terraform, Software Version Control, Devsecops, Api Management, Serverless Computing, Key Vault - **Published:** September 8, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840616409-senior-cloud-infrastructure-engineer ## About the Role * Strong hands-on experience with Microsoft Azure core services (networking, compute, storage) and platform services (AKS, App Services, API Management, Event Hub/Service Bus). * Proficiency with Infrastructure as Code: Terraform (essential) and/or Bicep (optional); module design, versioning and testing. * Solid CI/CD background using Azure DevOps or GitHub Actions (pipelines, environments, approvals, templates), including build and release strategies. * Kubernetes experience in production (AKS): cluster operations, node pools, networking (CNI), ingress, secrets, RBAC and workload identity. * Experience with GitOps, and container build pipelines (e.g., ACR, OPA policies, image scanning). * Working knowledge of observability tooling (Azure Monitor, Log Analytics, Application Insights, Datadog/Grafana) and alerting/response workflows. * Understanding of the Microsoft Cloud Adoption Framework, Azure Landing Zones and the Well-Architected Framework. * Familiarity with DevSecOps practices: threat modelling, dependency and container scanning, SBOM management, and shift-left security. * Comfortable collaborating with software engineers and SREs; able to translate platform capabilities into simple self-service experiences. * Excellent communication, documentation and stakeholder management skills; able to lead by influence and mentor others., * Microsoft AZ-104 (Administrator) - Required, or equivalent experience. * AZ-400 (DevOps Engineer Expert), AZ-305 (Solutions Architect), CKA/CKAD, HashiCorp Terraform Associate - Desired, one or more. * ITIL 4 Foundation or SRE Foundation - Desired. * Willingness to provide occasional out-of-hours and on-call support as required. * Experience building IDP capabilities such as service catalogues (e.g., Backstage), developer portals, or golden path templates. * Serverless and event-driven architectures (Functions, Logic Apps, Event Grid). * Experience in regulated industries (e.g., Financial Services) and with compliance standards (ISO 27001, SOC 2). * Knowledge of FinOps principles and cost governance on Azure. * Stage 1 (remote): competency and technical interview including discussion of prior platform/DevOps work and scenario-based problem solving. * Stage 2 (on-site/remote): practical exercise (e.g., pipeline/IaC/Kubernetes task) and a short design presentation to a panel. ## Description As we progress our digital transformation, we are scaling our Platform Engineering capability to build and operate our Internal Developer Platform (IDP) on Microsoft Azure. We are seeking a Cloud Infrastructure Engineer with a track record of delivering secure, reliable, and automated cloud platforms at enterprise scale. You will help design, build and run paved roads (golden paths) that enable product teams to ship quickly and safely, applying SRE and DevSecOps practices throughout the software delivery lifecycle., * Design, build and operate the Azure-based Internal Developer Platform as a product, enabling self-service environment provisioning and repeatable golden paths. * Develop and maintain Infrastructure as Code (Terraform and/or Bicep) modules and reusable templates for AKS, networking, storage, databases, and app runtimes. * Implement and evolve CI/CD pipelines (HL version control set) with quality gates, automated testing, security scanning, and progressive delivery. * Introduce and run GitOps for Kubernetes (AKS preferred), patterns and multi-environment promotions. * Own platform observability: metrics, logs and traces using Azure Monitor / Log Analytics / Application Insights, plus Datadog/Grafana where appropriate. * Embed security by design: Azure Policy, Defender for Cloud, secrets management with Key Vault, SBOM and image scanning, policy-as-code and least privilege IAM. * Drive reliability using SRE practices: define SLIs/SLOs, error budgets, capacity planning, chaos testing, incident response and blameless post-incident reviews. * Partner with application squads to remove toil, improve developer experience (DX), and reduce lead time for changes through automation and platform enhancements. * Implement cost visibility and optimisation (FinOps) across the platform: tagging, budgets/alerts, rightsizing, autoscaling and usage reporting. * Maintain platform documentation, runbooks and service catalog entries; contribute to onboarding guides and demo sessions for consumers of the platform. * Participate in an on-call rota for critical platform services and lead/coordinate incident response when required. ## Related Videos - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [The journey from developer to devops - what i've learnt along the way](https://www.wearedevelopers.com/videos/238-the-journey-from-developer-to-devops-what-i-ve-learnt-along-the-way) - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)