Senior Cloud Engineer - Contract in London

Flagstone is an online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. Each definition shares a common thread: our unique culture. It’s our pride and joy. And our competitive advantage.

To revolutionise the savings market, we need to be at our best. But high performance takes more than talent – it takes a culture of kindness, respect, and growth. That’s why we’re building a diverse, inclusive community, where your voice is heard and valued. Where, with close support and room to develop, you can surpass even your own expectations. And be rewarded for it.

Cloud Engineering builds and runs the new Azure cloud that everything else at Flagstone depends on. It's the foundation for our security tooling, our observability, and the hosting for our AI. The team works in infrastructure-as-code (Terraform and Bicep), owns the landing zones and hub-and-spoke networking, and builds the golden paths that speed up delivery across our engineering squads.

This is a contract role, so we’re looking for someone who can hit the ground running. You’ll bring immediate impact and add value from day one, working independently without a long ramp-up. Your work will be visible, and the problems you solve will matter.

What you’ll do:

• Migrate live services onto the new Azure cloud, with no disruption to current production systems.
• Absorb day-to-day operational support and incident response, relieving pressure on the permanent team and keeping migration cadence up.
• Author and maintain production-grade Terraform (and Bicep) modules, with testing, validation, versioning, and automated drift detection and remediation.
• Design landing zones, hub-and-spoke network architectures, private endpoint patterns, and hybrid connectivity (ExpressRoute and VPN gateways).
• Build the shared integration "front door" that lets partners and AI tooling integrate quickly and safely.
• Define and roll out golden paths that cut delivery cost and speed up engineering squads.
• Stand up our AI platform foundations: an AI gateway, an observability stack, and hosting for AI tools including Flagstone Concierge, with model access through AWS Bedrock.
• Build and maintain infrastructure pipelines with security scanning, plan validation, and approval gates.
• Implement RBAC using Entra ID, managed identities, and service principals.

What you’ll bring:

• Hands-on Azure platform experience across landing zones, networking, identity, and storage.
• Infrastructure-as-code with Terraform and/or Bicep in a production context, including migration between them.
• Practical experience with hub-and-spoke networking, private endpoints, DNS integration, and hybrid connectivity.
• Experience building end-to-end CI/CD pipelines with automated security and compliance gates.
• Solid grasp of Entra ID, RBAC, managed identities, and the Azure subscription and management group hierarchy.
• Comfortable owning both migration delivery and the operational support that runs alongside it.
• Ability to communicate design decisions and trade-offs clearly, through engineering briefs and architectural decision records.
• A growth mindset and genuine curiosity to keep learning.
• Relevant Azure certifications (for example AZ-104 or AZ-305).
• Experience hosting AI workloads, including AI gateways, observability, and model access through AWS Bedrock.
• Experience building golden paths or internal developer platforms.
• Experience working in a similar fintech or financial services environment.

At Flagstone, we’re assembling a diverse team that defies our industry’s norms. Think this role could suit you? We encourage you to apply, no matter your background.