Cloud engineer in financial services

We are seeking an experienced Senior Cloud Infrastructure Engineer to work with a financial services client on the development and automation of its cloud and data platform infrastructure. The role has a strong focus on Snowflake Infrastructure as Code (IaC), Terraform and Azure, alongside improving security, identity management and CI/CD processes. You will play a key role in automating Snowflake provisioning, modernising deployment pipelines and strengthening the management of credentials across Azure and Snowflake.

• Design and develop reusable Terraform modules to provision and manage Snowflake databases, schemas, warehouses, roles, grants, stages, integrations and other platform objects.
• Develop and maintain reusable modules, manage Terraform state, perform state migrations and import existing resources into centralised infrastructure management.
• Manage Azure resources and identity configuration using the azurerm and azuread Terraform providers, including Key Vault, app registrations, service principals and managed identities.
• Support the migration from Azure DevOps to GitHub, including GitHub Actions, CODEOWNERS, environment approvals and OpenID Connect (OIDC) workload identity federation.
• Improve automated credential rotation, centralise secrets management through Azure Key Vault and enhance Snowflake authentication and access controls.
• Develop safer and more flexible deployment and release processes for Snowflake and Airflow, supporting validation, controlled promotion and production releases.
• Define clear boundaries between identity management, infrastructure provisioning and platform access, working with enterprise identity and access management processes.

• Strong hands-on experience with Terraform and Infrastructure as Code, including reusable module design, state management, migrations and importing existing resources.
• Practical experience with the Terraform azurerm, azuread and Snowflake providers.
• Strong Snowflake administration experience, including role hierarchies, grants, databases, schemas, warehouses and integrations.
• Experience managing Azure infrastructure, identity and security, including Azure Key Vault, app registrations, service principals and managed identities.
• Experience building and maintaining CI/CD pipelines using GitHub Actions, Azure DevOps or similar tooling.
• Understanding of secure authentication patterns, secrets management, credential rotation and OIDC-based authentication.
• Experience automating infrastructure deployments and managing changes safely across environments.
• Будет плюсом: Experience migrating repositories and CI/CD pipelines from Azure DevOps to GitHub; Experience with Snowflake personal access tokens, network rules and authentication for local development; Experience with Airflow deployment and release processes; Familiarity with Docker and uv; Dependency management tooling such as Dependabot or Renovate; Experience working in financial services or other regulated environments

• Условий в вакансии нет