Senior Cloud Engineer

Salary: £72,000 - 97,000 per year

Requirements

• We are looking for a senior cloud or infrastructure engineer with credible experience across Azure platform delivery, networking, and infrastructure-as-code.
• We need hands‑on Azure platform experience across landing zones, networking, identity, and storage.
• We need practical infrastructure-as-code experience with Terraform and/or Bicep in a production context, including migration between them.
• We need practical experience with hub‑and‑spoke networking, private endpoints, DNS integration, and hybrid connectivity.
• We need experience building end-to-end CI/CD pipelines with automated security and compliance gates.
• We need a solid grasp of Entra ID, RBAC, managed identities, and the Azure subscription and management group hierarchy.
• We need someone comfortable owning both migration delivery and the operational support that runs alongside it.
• We need the ability to communicate design decisions and trade‑offs clearly through engineering briefs and architectural decision records.
• We value a growth mindset and genuine curiosity to keep learning.
• Relevant Azure certifications such as AZ‑104 or AZ‑305 are preferred.
• Experience hosting AI workloads, including AI gateways, observability, and model access through AWS Bedrock, is preferred.
• Experience building golden paths or internal developer platforms is preferred.
• Experience working in a similar fintech or financial services environment is preferred.

Responsibilities

• Migrate live services onto our new Azure cloud with no disruption to current production systems.
• Absorb day‑to‑day operational support and incident response to relieve pressure on the permanent team and keep migration cadence up.
• Author and maintain production‑grade Terraform and Bicep modules, including testing, validation, versioning, and automated drift detection and remediation.
• Design landing zones, hub‑and‑spoke network architectures, private endpoint patterns, and hybrid connectivity through ExpressRoute and VPN gateways.
• Build the shared integration front door that lets partners and AI tooling integrate quickly and safely.
• Define and roll out golden paths that cut delivery cost and speed up our engineering squads.
• Stand up our AI platform foundations, including an AI gateway, an observability stack, and hosting for AI tools such as Flagstone Concierge, with model access through AWS Bedrock.
• Build and maintain infrastructure pipelines with security scanning, plan validation, and approval gates.
• Implement RBAC using Entra ID, managed identities, and service principals.

Technologies

• AI
• AWS
• Azure
• CI/CD
• Cloud
• Support
• Network
• RBAC
• Security
• Terraform
• VPN
• DevOps

More

We are Flagstone, an online savings platform reinventing how individuals, businesses, and charities manage, protect, and grow their cash. We are a diverse, collaborative, and profitable business where smart people do their best work, and our culture of kindness, respect, and growth is a key part of our competitive advantage. Our Cloud Engineering team builds and runs our new Azure cloud, which underpins our security tooling, observability, and AI hosting. This is a contract role based in our London office, working in a hybrid setup within our Engineering department.

last updated 36 week of 2026