10/29/2026 updated
100 % available
Senior Cloud Infrastructure and Platform Engineer
Reading, United Kingdom
Worldwide
BSc (Hons) Computer Science (2:1), Coventry UniversityArgo CDDomain Name System (DNS)Azure AKSTerraformAWS EKS
Infrastructure as Code (Terraform)
Reusable module design using Terraform providers (azurerm, azuread), remote state management, state migrations, resource importing, and automated drift detection across large-scale Azure estates with hundreds of subscriptions.
Azure Identity and Access Management
Enterprise identity governance using Microsoft Entra ID, including app registrations, service principals, managed identities, least-privilege RBAC, conditional access policies, and OIDC workload identity federation.
CI/CD and Release Automation
Design and modernisation of CI/CD pipelines using GitHub Actions and Azure DevOps, including CODEOWNERS reviews, environment approval gates, release validation, and integration of tools such as Flux, ArgoCD, SonarQube, and Checkmarx.
Security and Credential Management
Centralised secrets management with Azure Key Vault, automated secret and credential rotation, OpenID Connect workload identity federation, Azure Policy enforcement, Checkov scanning, and CIS Azure Foundations Benchmark Level 2 and GDPR compliance.
Cloud and Data Platform Infrastructure
Design and operation of Microsoft Azure landing zones across 300+ subscriptions, VNet peering, private endpoints, private DNS zones, NSGs, Azure Data Factory pipelines, MongoDB clusters, Azure Storage, and event-driven data pipelines.
Containers, Scripting and Tooling
Container orchestration with Docker, Azure Kubernetes Service (AKS), and AWS EKS, policy-as-code governance with OPA Gatekeeper and Kyverno, Helm chart management, and scripting in Python, Bash, PowerShell, and TypeScript.
Observability and Operations
Monitoring and observability using Azure Monitor, Log Analytics, Prometheus, Grafana, and New Relic, including automated remediation runbooks and FinOps cost governance practices.
Reusable module design using Terraform providers (azurerm, azuread), remote state management, state migrations, resource importing, and automated drift detection across large-scale Azure estates with hundreds of subscriptions.
Azure Identity and Access Management
Enterprise identity governance using Microsoft Entra ID, including app registrations, service principals, managed identities, least-privilege RBAC, conditional access policies, and OIDC workload identity federation.
CI/CD and Release Automation
Design and modernisation of CI/CD pipelines using GitHub Actions and Azure DevOps, including CODEOWNERS reviews, environment approval gates, release validation, and integration of tools such as Flux, ArgoCD, SonarQube, and Checkmarx.
Security and Credential Management
Centralised secrets management with Azure Key Vault, automated secret and credential rotation, OpenID Connect workload identity federation, Azure Policy enforcement, Checkov scanning, and CIS Azure Foundations Benchmark Level 2 and GDPR compliance.
Cloud and Data Platform Infrastructure
Design and operation of Microsoft Azure landing zones across 300+ subscriptions, VNet peering, private endpoints, private DNS zones, NSGs, Azure Data Factory pipelines, MongoDB clusters, Azure Storage, and event-driven data pipelines.
Containers, Scripting and Tooling
Container orchestration with Docker, Azure Kubernetes Service (AKS), and AWS EKS, policy-as-code governance with OPA Gatekeeper and Kyverno, Helm chart management, and scripting in Python, Bash, PowerShell, and TypeScript.
Observability and Operations
Monitoring and observability using Azure Monitor, Log Analytics, Prometheus, Grafana, and New Relic, including automated remediation runbooks and FinOps cost governance practices.
Experience
Professional experience10+ years
Freelancer since2012
Languages
EnglishNative speaker
Project history
Designed and maintained reusable Terraform modules across a 300-subscription Azure estate, managed centralised Terraform remote state, modernised CI/CD delivery via Azure DevOps and GitHub Actions with OIDC workload identity federation, enforced Entra ID identity governance, embedded automated policy and security validation (Checkov, SonarQube, Checkmarx), rolled out Azure Policy and network security controls, built a self-service platform onboarding engine using Python, Bash, and TypeScript, and maintained 15 production AKS clusters with OPA Gatekeeper and Kyverno achieving 99.95% availability.
Centralised secrets management in Azure Key Vault with automated credential rotation using PowerShell, Bash, and Managed Identities, configured enterprise identity and least-privilege access hierarchies across Active Directory and Microsoft Entra ID, engineered automated infrastructure for production data platforms including Azure Data Factory and MongoDB, built controlled release pipelines in Azure DevOps and GitHub Actions, led a large-scale cloud migration from AWS to Azure using Terraform, cut cloud compute costs by 40% through containerisation, and mentored engineering teams on modular Terraform design and CI/CD governance.
Migrated legacy on-premises applications and data workloads into cloud infrastructure, partnered with development and operations teams on environment readiness and automated release processes, wrote build, validation, and deployment scripts in Bash and PowerShell, and built TypeScript services to remove legacy system dependencies.