At IMSERV, we're proud to be one of the UK's leading energy data and metering specialists. We deliver award-winning services to customers across the country, providing specialist metering technology for electricity, gas and water, alongside highly accurate energy data collection services.
About the Role
The purpose of the role is to own the Azure platform on which IMSERV’s Astral products are built, tested and run, helping us deliver highly scalable, secure, multi-tenant SaaS software to clients across the globe. You will be one of two DevOps Engineers who together own the path to production: the Azure environments, the CI/CD pipelines, the releases and the security and cost posture of the estate. The pair share the full scope so that no environment, pipeline or release depends on any one individual. This role sits within our Scrum teams, working day to day with Software Engineers, Testers and the Technical Architect. Where they own the code, you own the platform it ships on, through the entire product lifecycle.
Responsibilities
- Environment management. Provision, configure and maintain the Astral environment estate (development, test, UAT/load and production), keeping environments consistent, reproducible and documented through infrastructure as code. Manage environment refreshes and test data in line with our data protection rules.
- CI/CD pipelines. Build, maintain and continuously improve our Azure DevOps build, test and release pipelines, including artifact management, controlled build configurations and pipeline variables, and automated quality and security gates. Consolidate duplicated per-client pipelines toward a single deployment path as the platform moves to multi-tenancy.
- Release management. Plan and execute deployments through the environment chain to production, with rehearsed rollback for every release. Support product go-lives and maintain a clear, communicated release calendar.
- Security and access. Own secrets and certificate management (Azure Key Vault, managed identities), role-based access control and least-privilege across the estate, and platform patching. Work with IT security on audit remediation and the security release plan.
- Monitoring, reliability and recovery. Own observability (Application Insights, Log Analytics), alerting, backups and disaster recovery, including periodic DR tests. Lead incident response for platform issues and run blameless root-cause reviews.
- Cost management. Monitor and optimise Azure spend across environments and clients; right-size resources and report on cost drivers.
- Documentation and knowledge. Keep runbooks, environment documentation and configuration records current, written up the same day work is done. We are removing single points of failure, not creating new ones.
- Community membership. Be an active member of the Scrum team and the wider Product Engineering community, taking part in sprint ceremonies, the Innovation Forum and team events, and unblocking engineers’ environment and pipeline needs quickly.
What you'll need
- Has 5+ years running production Azure environments as their primary discipline (App Services, Azure SQL, storage, networking fundamentals).
- Has written and maintained CI/CD, build and deployment pipelines in Azure DevOps (YAML), including artifact management, controlled build configurations and pipeline variables.
- Routinely practices infrastructure as code (Bicep, ARM or Terraform) and is a confident scripter in PowerShell and the Azure CLI.
- Strong appreciation for secure-by-default platform design: Key Vault, managed identities, RBAC and least privilege.
- Has owned monitoring, backup and disaster recovery for a live service (Application Insights, Log Analytics), including responding to and resolving incidents.
- Has worked in an Agile SCRUM team and is familiar with the associated ceremonies and artefacts.
- Understands SQL Server well enough to manage environment data, refreshes and test data safely (in a Relational Database system).
- Microsoft certification: AZ-104 (Azure Administrator) or AZ-400 (DevOps Engineer Expert).
- Has run or supported one or more of the following Azure PaaS services: Azure Service Bus, Azure Functions, Azure API Management (APIM), Azure Logic Apps , Azure Data Factory / Synapse / Microsoft Fabric.
- Enough C# / .NET to read application code and debug a failing build alongside the engineers,
- Experience consolidating single-tenant, per-client deployments into a shared multi-tenant platform.
- Experience of enterprise client security requirements (supplier security reviews, ISO 27001-style controls, penetration test remediation).
- Practical use of AI-assisted tooling in platform and pipeline work.
- Buy & sell annual leave scheme
- Up to a 10% bonus
- Enhanced salary sacrifice pension
- Life assurance (up to 6x salary*)
- Simply Health plan (with upgrade options)
- Car salary sacrifice scheme*
(*Length of service and T&Cs apply)
Equal Opportunity Statement
At IMSERV, we're committed to building a team where everyone feels valued, respected and able to do their best work. We welcome applications from people of all backgrounds, experiences and communities. A diverse team brings fresh perspectives, strengthens collaboration and helps us deliver the best possible service to our customers.
If you're interested in the role but don't meet every single requirement, we'd still encourage you to apply.
(Please note that we reserve the right to close this position before the expiry date.)