Trigent Software Inc
Website:
trigent.com
Job details:
Role Purpose
You will be a member of a new Azure squad, building an enterprise Azure platform as reusable, versioned products: landing zones, Terraform modules, policy baselines, standard images and CI/CD pipelines, all consumed through a self-service developer portal. As a senior engineer you will own significant components end to end and help set the squad's standards from day one.
Key Responsibilities
- Platform engineering: Design and build Azure landing zone components — subscription vending, networking, identity integration, policy baselines and guardrails — as reusable Terraform modules.
- Component ownership: Own significant platform products end-to-end: design, build, test, documentation and release management.
- CI/CD pipelines: Build and maintain GitHub Actions pipelines for infrastructure delivery, with security scanning, policy checks, testing and cost controls embedded as quality gates.
- Azure Local and hybrid: Contribute to the engineering of Azure Local capability and hybrid automation, extending the platform model into the client's private cloud estate.
- Standard images: Build and maintain pipelines for hardened compute standard images (build, test, publication).
- Self-service products: Package platform capabilities for consumption as self-service golden paths through the Port.io developer portal catalogue.
- Engineering standards: Help establish squad conventions — code review discipline, module structure, testing standards and documentation — and uphold them through peer review.
- Mentoring: Support and coach the squad's mid-level engineers; contribute to design discussions with the Engineering Lead and Platform Architect.
Essential
- 10+ years: in infrastructure, cloud or DevOps engineering, of which 8+ years hands-on Azure engineering.
- Azure platform depth: Strong experience with enterprise Azure — management groups, subscription design, Azure Policy, networking (hub-spoke or vWAN), Entra ID and security baselines.
- Terraform: Advanced, production Terraform experience: writing reusable modules, managing state, versioning and testing infrastructure code.
- Secure platform engineering: Building secure-by-default infrastructure as a standard part of module design: identity and least-privilege design, guardrails and policy enforcement, and secrets management.
- Testing infrastructure code: Validating infrastructure code properly, through module testing, plan review discipline and pre-merge automated checks.
- Engineering discipline: Strong Git workflow, code review and documentation habits; experience working in sprint-based agile teams.
- Collaboration: Comfortable working in a distributed team with UK-based technical leadership and client stakeholders; clear written and spoken English.
Nice to Have
- CI/CD platform: GitHub Actions preferred. Azure DevOps or GitLab CI transfer directly.
- Hybrid: Azure Local, Azure Stack HCI or Azure Arc.
- Security tooling: Policy-as-code (OPA, Sentinel), IaC scanning (Checkov, Wiz, tfsec), and Terratest or similar module testing frameworks.
- Scripting in Python, PowerShell or Bash for automation tooling.
- Experience in financial services or similarly regulated environments.
- Microsoft certifications (AZ-104 Azure Administrator, AZ-305 Azure Solutions Architect, AZ-400 DevOps Engineer).
Technologies & Tools
The squad's toolchain:
- Core: Azure, Azure Local (Azure Stack HCI), Azure Arc, Terraform, GitHub and GitHub Actions.
- Policy and security: Azure Policy, Wiz and Checkov for IaC scanning, and OPA for policy-as-code.
- Pipeline quality: tflint, terraform-docs, Infracost and Terratest.
- Consumption: The Port.io internal developer portal, which is how teams consume platform products.
- Standard images: Image pipelines for hardened compute images.
Click on Apply to know more.
