Lead DevOps Engineer

- Own subscription and landing zone hygiene, including remediation of legacy resources outside the agreed model - Define and enforce platform governance standards: naming conventions, tagging schema, Azure Policy baseline and controlled exception handling - Define and maintain identity and access patterns (RBAC and, where applicable, PIM) and platform security guardrails in collaboration with security and relevant stakeholders - Improve platform cost governance by ensuring ownership and tagging discipline supports accurate reporting and accountability - Establish and maintain Terraform as the authoritative mechanism for platform and environment provisioning and change control - Design and maintain reusable IaC modules/patterns; implement safe change practices (review, validation, controlled applies) - Reduce drift and improve environment repeatability across dev/QA/prod - Define and evolve delivery system standards in partnership with the Product Development Team Leader, and enforce them through Azure DevOps templates, policies and required checks - Own and improve Azure DevOps CI/CD standards, pipeline templates, approvals/gates, and environment promotion model - Provide golden path templates and patterns for application-level and data-level delivery (including Azure resources) so squads can deliver without bespoke pipeline design per product - Embed automated quality controls and security scanning into pipelines (e.g., SAST/SCA) and define secure secret-handling patterns aligned to Birketts expectations - Implement and enforce PR/branch policies and release controls to reduce variability and operational risk - Provide and evolve platform observability foundations: monitoring, logging, metrics, dashboards and alerting (using the agreed toolset) - Define and improve incident response and operational readiness expectations (runbooks, escalation paths, recovery/rollback patterns, environment health checks) - Establish and maintain DR and operational processes for the platform and environments, with clear escalation to development squads where required - Maintain a visible platform backlog and roadmap (stabilisation, governance, standardisation, developer experience) - Coach squads in using the delivery system effectively (templates, PR discipline, gated releases, environment promotion) - Support capability building for internal engineers (including infrastructure engineers where willing) using pairing and staged responsibility (gated autonomy) - Create and maintain platform documentation: handbook, onboarding guides, decision records and runbooks to reduce key-person dependency - Assess DevOps capacity and resilience needs over time and provide recommendations for scaling the function as workload/support requirements mature