Salary: £33,000 - 47,000 per year
Requirements: - Proven line-management experience leading a DevOps, CloudOps or platform team, with accountability for recruitment, objectives, appraisals, development and performance management.
- Current hands-on experience in DevOps, cloud or platform engineering, with the ability to contribute directly to architecture, Azure platform work, pipelines, Bicep/ARM Infrastructure-as-Code, automation, troubleshooting, security and resilience.
- Evidence of implementing and maintaining operational controls, processes and procedures in a DevOps or CloudOps environment, including ownership of improvement actions, exceptions, corrective actions and audit evidence.
- Practical command of end-to-end change and release governance, including risk classification, peer or senior review, testing, approvals, segregation of duties, rollback, emergency change, post-change verification and closure.
- Deep Azure platform expertise across Entra ID, App Services, Key Vault, App Gateway, VNets, Azure SQL or MySQL, WAF and DNS.
- Strong CI/CD and Infrastructure-as-Code knowledge across Azure DevOps pipelines and Bicep/ARM for Windows and Linux workloads, with the ability to govern standards and technical gates.
- A track record of operating production, multi-tenant SaaS at scale, including SLA/SLO ownership, major-incident command, root-cause analysis, disaster recovery and service improvement.
- Willingness and ability to participate personally in the out-of-hours on-call rota, including scheduled evening, weekend and bank-holiday cover where required.
- Experience working with security, compliance and audit teams in a regulated or data-sensitive environment, with the ability to turn policies into workable controls and demonstrate that they operate effectively.
- Demonstrable practical use of Claude, GitHub Copilot or Codex as engineering delivery tools, with sound governance, secure use and accountable human review.
- Clear senior-level communication and reporting, with the discipline to assign owners, manage risks and dependencies, challenge weak evidence and pursue actions through to verified closure.
- Desirable: Experience leading an operational-control improvement or remediation programme in an ISO 27001 or similarly controlled environment.
- Desirable: Containerisation and orchestration experience across AKS or Kubernetes and Docker for multi-tenant workloads.
- Desirable: Knowledge of ITIL or service-management controls and practical use of service desk or work-management platforms such as SysAid.
- Desirable: Experience in education, public sector, health, finance or another data-sensitive sector, including familiarity with UK GDPR and customer-specific change controls.
- Desirable: Relevant certification, such as Azure Solutions Architect Expert or DevOps Engineer Expert.
Responsibilities: - Lead, line-manage and develop a team of 3-4 DevOps engineers, including at least one senior engineer; own recruitment, onboarding, objectives, appraisals and performance management.
- Set clear role boundaries, decision rights and escalation routes; ensure high-risk activities are performed or approved only by people with the required competence and authority.
- Own team capacity, priorities and the out-of-hours on-call rota, and take a fair share of scheduled rota cover alongside the engineers.
- Respond to production incidents and urgent operational issues during on-call cover, including evenings, weekends and bank holidays where required.
- Protect time for reliability, control improvement, technical debt, training and documentation.
- Build an accountable coaching culture in which engineers raise risk early, follow agreed standards, maintain evidence and learn from incidents and control failures.
- Provide hands-on engineering leadership for Bromcoms Azure-hosted, multi-tenant SaaS platform.
- Work closely with engineers to design, build, review, troubleshoot and improve platform services, pipelines, Infrastructure-as-Code, automation and operational tooling.
- Set and maintain engineering standards for Azure architecture, Azure DevOps, Bicep/ARM, deployment patterns, observability, resilience, security and operational support.
- Challenge designs and changes using risk, maintainability, failure-mode, rollback and supportability thinking.
- Own platform SLAs/SLOs, service health, major-incident command, root-cause analysis, disaster recovery, business continuity testing and continuous service improvement.
- Take day-to-day ownership of the agreed operational control improvement plan and maintain controls as part of normal team operation.
- Implement and enforce an end-to-end change lifecycle covering request, design, risk assessment, review, testing, approval, implementation, post-change verification and formal closure.
- Ensure policies, standard operating procedures, runbooks, RACI and ownership arrangements, approval thresholds and evidence requirements remain current, practical and aligned across operational systems.
- Ensure production and customer-impacting changes have proportionate risk classification, segregation of duties, pre-production evidence, approval, rollback plans and traceable outcomes.
- Maintain audit-ready evidence for changes, deployments, access, incidents, disaster-recovery tests, vulnerabilities, exceptions and corrective actions.
- Confirm controls are operating effectively, track exceptions, overdue actions and repeat failures to closure, and provide weekly control reporting.
- Work with QA, Compliance, Security and technical leads to translate procedural controls into automated technical gates where practical.
- Design, build, review and continually improve Azure DevOps CI/CD pipelines and Bicep/ARM Infrastructure-as-Code, including automated approvals, testing, security checks, evidence capture and post-deployment verification.
- Reduce manual toil and unsafe variation through automation, reusable platform patterns and clear service ownership.
- Set the strategy and guardrails for AI-assisted and agentic DevOps delivery across CI/CD, Infrastructure-as-Code generation, incident triage, log analysis, runbook automation and documentation.
- Use and govern AI engineering tools with clear quality, security, data-protection and human accountability controls.
- Own platform identity, privileged-access and secrets-management controls, including Entra ID, Key Vault, OAuth, certificate automation, WAF and network security across VNets, App Gateway, S2S VPN and DNS.
- Ensure access follows least-privilege principles and is reviewed regularly, with effective joiner-mover-leaver, break-glass and segregation-of-duties controls.
- Own observability standards across Azure Monitor and Grafana, security and vulnerability follow-up, and cloud cost and FinOps accountability for the Azure estate.
- Act as the accountable management and technical escalation point across Software Engineering, CloudOps, IT and Security, QA and Compliance, and external partners.
- Provide concise, conclusions-first reporting to the CTO and Executive Team on service health, delivery, control effectiveness, risks, exceptions and improvement progress.
- Contribute to the software delivery transformation programme and align the DevOps operating model and controls with wider software-engineering standards.
Technologies: - AI
- ARM
- Architect
- Azure
- CI/CD
- Cloud
- Copilot
- CTO
- DevOps
- Docker
- GitHub
- Grafana
- Support
- ITIL
- Kubernetes
- Linux
- MySQL
- Network
- OAuth
- PLC
- SQL
- Security
- VPN
- WAF
- Windows
More:
Bromcom Computers Plc is the UKs fastest-growing cloud-native school Management Information System provider, serving thousands of schools across three UK countries. This is a hands-on DevOps engineering leadership role with a 70% engineering and 30% people-management balance, leading a team of 3-4 engineers on Bromcoms Azure-first SaaS platform. The role involves close collaboration with engineering, cloud, IT, security, QA and compliance teams, plus participation in the out-of-hours on-call rota and direct accountability for operational controls, service reliability, security, automation and continuous improvement.
last updated 39 week of 2026