DevOps Engineer – Cloud Infrastructure (Azure/AWS)

About the role

Zenalyst is building an enterprise execution layer for CFO offices, automating treasury, procure‑to‑pay and collections for large organisations. The platform runs multi‑tenant workloads across Azure and AWS, offering managed, single‑tenant and bring‑your‑own‑cloud modes. As a DevOps Engineer you will own the underlying cloud infrastructure, ensuring parity, security and reliability as the business scales.

Key responsibilities

• Design, implement and maintain infrastructure as code using Bicep (Azure) and Terraform/CDK (AWS).
• Provision and operate container workloads on Azure Container Apps and ECS Fargate, including autoscaling based on CPU, HTTP concurrency and queue depth.
• Manage tenant provisioning pipelines: new PostgreSQL instances, secrets, connection routing.
• Maintain CI/CD pipelines in GitHub Actions for Java, Python, Node and React services.
• Implement OIDC‑based deployment identities and manage container image pipelines with scanning, signing and geo‑replication.
• Handle networking and security – private endpoints, DNS, NAT gateways, static egress IPs, firewall allowlists and mTLS certificate lifecycle.
• Support ISO 27001 evidence collection, security reviews and observability via OpenTelemetry, App Insights, CloudWatch and Grafana.
• Own backup, point‑in‑time‑recovery and disaster‑recovery processes for databases, Redis and object storage, and run regular restore drills.
• Participate in on‑call rotation, incident response and post‑mortem documentation.
• Track per‑tenant infrastructure cost, optimise resource sizing and eliminate waste.

Required profile

• 2–4 years of experience in DevOps, SRE or cloud platform roles.
• Hands‑on production experience with Azure or AWS (not just certifications).
• Proficiency with infrastructure‑as‑code tools such as Terraform and Bicep.
• Experience operating container platforms and CI/CD pipelines.
• Familiarity with security best practices, certificate management and ISO 27001 compliance.

Required skills

• Azure, AWS
• Bicep, Terraform, CDK
• GitHub Actions
• PostgreSQL
• OpenTelemetry
• Java, Python, Node.js, React
• OIDC, Flyway, Alembic
• Private endpoints, DNS, NAT gateways
• mTLS certificates
• Azure Key Vault, AWS Secrets Manager
• Grafana, CloudWatch, Azure Monitor (App Insights)
• Redis, Docker, Azure Container Apps, ECS Fargate