DevOps Engineer (Azure)

Own the platform that carries HR data. We're building an AI-powered HR platform for Nordic organisations. It covers recruitment, organisation, workforce, payroll, feedback and learning, all on one shared employee record. Our built-in AI drafts and suggests. A person approves. HR data is about as personal as data gets. Our customers trust us with contracts, absence, pay, and reviews.The role This is our first dedicated DevOps role. The foundation is already in place: everything runs on Azure, the infrastructure is in Terraform, and deployments go through Azure DevOps. - What we need now is one person who owns it, from access and secrets to audit logs and recovery. You'll work closely with our CEO, who sets the technical direction, and with a team that builds alongside the HR teams using the product.What you'll ownProduction infrastructure and access. - Access control. Separate admin accounts, regular access reviews, and Entra ID PIM and Conditional Access. - Secrets management. Key Vault only, with expiry, rotation and federated credentials instead of long-lived keys. - Database access. Review the queries and write scripts that run there. - Audit logging. One-year retention, with alerts that someone actually reads. - Certificate renewal. - Disaster recovery. Not just a plan: tested, and tested again. Our stackAreaToolsCloudAzureIaCTerraformCI/CDAzure DevOps PipelinesComputeAzure Container Apps · Docker · Azure Container RegistryDataPostgreSQL Flexible Server · Blob Storage · Key Vault · App ConfigurationNetwork & edgeVNet · Private endpoints · Azure Front Door with WAFMonitoringApplication Insights · Log Analytics · OpenTelemetryIdentityEntra ID · Managed identitiesOtherAzure Communication Services - You'll fit in well if youHave solid, hands-on experience running production workloads on Azure - Write and maintain Terraform comfortably, and treat infrastructure changes as code that needs review - Know Entra ID well: managed identities, PIM, Conditional Access and workload identity federation - Have run PostgreSQL in production - Have built CI/CD pipelines, ideally in Azure DevOps - Treat security and compliance as part of the design, not paperwork afterwards - Prefer simple and dependable over clever, because a setup the team understands beats one only you understand - Ready to have fun