Job Description – DevOps Engineer (SFIA Level 4)
Job Title: DevOps Engineer (SFIA Level 4 – Senior).
Programme: Unified Data Platform (UDP) – Azure Microsoft Fabric.
SFIA Level: Level 4 – Enable.
DDaT Role: DevOps Engineer.
Contract Duration: Up to 36 months (with potential extension).
Location: Leeds / London / Sheffield / Remote (hybrid – travel to client sites as required).
Security Clearance: SC Clearance.
Job Summary – What Makes This Role Exciting
A rare opportunity to operate at the forefront of cloud-native data platform engineering within a major UK government programme. As a DevOps Engineer on the client Unified Data Platform, you will be responsible for designing and implementing the automation, CI/CD, and platform engineering foundations that underpin an Azure Microsoft Fabric-based data lakehouse serving millions of citizens.
At SFIA Level 4, you will take ownership of CI/CD pipeline development, infrastructure-as-code, platform automation, and monitoring across the UDP programme. You will work in close collaboration with Infrastructure Engineers, Data Engineers, and Technical Architects to build robust, scalable, and secure DevOps practices that meet client stringent governance and security requirements.
Key Responsibilities: -

• Design, implement, and maintain CI/CD pipelines using Azure DevOps (YAML pipelines, release gates, multi-stage pipelines) for the Azure Fabric platform and associated data workloads.
• Develop and maintain infrastructure-as-code using Bicep and/or Terraform for provisioning and managing Azure Fabric, ADLS Gen2, Azure Key Vault, and supporting services.
• Implement monitoring, alerting, and observability solutions using Azure Monitor, Log Analytics, and Application Insights across the UDP platform estate.
• Enforce security and compliance controls within pipelines including secret management (Azure Key Vault), role-based access control (Azure Entra ID), and policy enforcement (Azure Policy).
• Support Data Engineers and Infrastructure Engineers with automated testing, environment management, and deployment strategies (blue/green, canary).
• Contribute to knowledge transfer, documentation, and running instructions to build client DevOps capability.

Essential Technical Skills:

• Strong experience with Azure DevOps – YAML pipelines, repository management, artefact feeds, and release orchestration
• Strong proficiency in infrastructure-as-code using Bicep and/or Terraform on Azure
• Strong experience with Azure platform services: Azure Fabric, ADLS Gen2, Azure Key Vault, Azure Monitor, Log Analytics
• Good experience with Azure Entra ID (formerly AAD) for identity, RBAC, and access control
• Good knowledge of containerisation (Docker) and container orchestration (Azure Kubernetes Service – AKS)
• Good experience with Git-based source control, branching strategies, and code review practices
• Good understanding of Azure Policy and Microsoft Defender for Cloud for compliance and security posture.

Nice to Have Skills:

• Experience with Microsoft Fabric deployment pipelines and Fabric REST APIs
• Familiarity with Azure Synapse Analytics or migration from Synapse to Fabric
• Experience in UK public sector or government secure environments (OFFICIAL, OFFICIAL-SENSITIVE)
• Knowledge of DDAT frameworks, GDS technology standards, and government security classifications
• Scripting experience with PowerShell and/or Python for automation tasks.

Domain / Behaviours:

• Security-first mindset – committed to building compliant, auditable, and governed automation
• Strong problem-solving ability and ability to work across data engineering and infrastructure teams
• Proactive approach to identifying and resolving platform reliability issues
• Clear and concise communicator across technical and management audiences

Qualifications:

• Relevant degree in Computer Science, Software Engineering, or related field (or equivalent experience)
• Microsoft Certified: DevOps Engineer Expert (AZ-400) – desirable
• Microsoft Certified: Azure Administrator Associate (AZ-104) – desirable

Travel Required:

• Yes – travel to client sites (Leeds, London, Sheffield) as required