Job title
DevOps Engineer
Reporting to
Abigail Howe
Based at
Hybrid - Remote (once a month)
Assigned office - 10 York Road, Waterloo, London
Purpose
As a DevOps Engineer in the IP Development team, you’ll enable fast, reliable delivery across multiple products by building and operating our Azure-based platform and CI/CD toolchain. You’ll collaborate across engineering, product and quality functions to automate the path from commit to production, embed observability and security, and provide self-service infrastructure for containers, serverless, AI/analytics and data services.
Role
- Own CI/CD pipelines (GitHub Actions/Azure DevOps): build, test (incl. security scans), release, blue/green/canary and rollback.
- Build and manage Infrastructure as Code (Terraform/Bicep) for AKS/ACR, App Service/Functions, VNets, APIM/Front Door, Key Vault, data and messaging.
- Embed observability (logs/metrics/traces, SLOs/error budgets), keep alerting actionable, maintain runbooks and dashboards.
- Champion security-by-default: IAM/RBAC, secrets management, policy-as-code, dependency and image scanning, cert/PKI hygiene.
- Maintain environment parity (DEV/TEST/STAGING/PROD), config/feature flags, and safe DB migration practices.
- Drive performance and cost efficiency: capacity planning, k6/perf testing, caching, and FinOps tagging/monitoring.
- Partner with Scrum Masters, BAs and QA on flow, release readiness and quality gates; support incidents and post-mortems.
- Create "golden paths" (templates, scripts, docs) that improve developer experience and self-service.
Person Specification
- Strong Azure: AKS, ACR, App Service/Functions, VNets/peering/NSGs, APIM/Front Door, Storage, Key Vault, Monitor/Log Analytics; AWS exposure desirable.
- Containers application experience beneficial; understanding of Docker, HPA, PDBs and rollout strategies.
- IaC: Terraform and/or Bicep (modules, plans, policy checks); pipeline-driven validate/plan/apply.
- CI/CD: GitHub Actions/Azure DevOps, artefact registries, versioning strategies, integrating unit/integration/E2E and SAST/DAST.
- Observability: Azure Monitor/App Insights, OpenTelemetry; designing actionable alerts and SLOs.
- Security: least privilege, RBAC, OIDC to cloud, Key Vault, vulnerability management (e.g. Dependabot), policy-as-code (Azure Policy/OPA).
- Networking fundamentals: DNS, TLS, HTTP, private endpoints, load balancers, WAF.
- Data & messaging: Azure SQL/Cosmos/Postgres, Redis, Service Bus/Event Hubs (Kafka nice to have).
- Scripting & automation: Bash/PowerShell/Python; YAML/JSON; solid Linux fundamentals.
- Ways of working: collaborative, clear documentation, agile delivery; on-call/incident experience; relevant certs (AZ-104/AZ-400/CKA) a bonus.
Protecting your privacy and the security of your data is a longstanding top priority for Bell Integration. Please consult our Privacy Notice (click here) to know more about how we collect, use and transfer the personal data of our candidates.