DevOps Engineer

Own the platform that carries HR data.

We're building an AI-powered HR platform for Nordic organisations . It covers recruitment, organisation, workforce, payroll, feedback and learning, all on one shared employee record. Our built-in AI drafts and suggests. A person approves.

HR data is about as personal as data gets. Our customers trust us with contracts, absence, pay, and reviews.

The role

This is our first dedicated DevOps role . The foundation is already in place: everything runs on Azure, the infrastructure is in Terraform, and deployments go through Azure DevOps.

What we need now is one person who owns it , from access and secrets to audit logs and recovery. You'll work closely with our CEO, who sets the technical direction, and with a team that builds alongside the HR teams using the product.

What you'll own

-

Production infrastructure and access.

-

Access control. Separate admin accounts, regular access reviews, and Entra ID PIM and Conditional Access.

-

Secrets management. Key Vault only, with expiry, rotation and federated credentials instead of long-lived keys.

-

Database access. Review the queries and write scripts that run there.

-

Audit logging. One-year retention, with alerts that someone actually reads.

-

Certificate renewal.

-

Disaster recovery. Not just a plan: tested, and tested again.

Our stack

Area

Tools

Cloud

Azure

IaC

Terraform

CI/CD

Azure DevOps Pipelines

Compute

Azure Container Apps · Docker · Azure Container Registry

Data

PostgreSQL Flexible Server · Blob Storage · Key Vault · App Configuration

Network & edge

VNet · Private endpoints · Azure Front Door with WAF

Monitoring

Application Insights · Log Analytics · OpenTelemetry

Identity

Entra ID · Managed identities

Other

Azure Communication Services

You'll fit in well if you

-

Have solid, hands-on experience running production workloads on Azure

-

Write and maintain Terraform comfortably, and treat infrastructure changes as code that needs review

-

Know Entra ID well: managed identities, PIM, Conditional Access and workload identity federation

-

Have run PostgreSQL in production

-

Have built CI/CD pipelines , ideally in Azure DevOps

-

Treat security and compliance as part of the design, not paperwork afterwards

-

Prefer simple and dependable over clever, because a setup the team understands beats one only you understand

-

Ready to have fun