Azure DevOps Engineer | KD Pharma

GT was founded in 2019 by a former Apple, Nest, and Google executive. GT’s mission is to connect the world’s best talent with product careers offered by high-growth companies in the UK, USA, Canada, Germany, and the Netherlands. On behalf of KD Pharma, GT is looking for an experienced Azure DevOps Engineer to support the infrastructure, security and operational design of a modern Microsoft-based data platform and the wider Azure environment. **Expected Involvement: The engagement is expected to begin with a 6-week Discovery phase, with approximately 45–60 hours of involvement in total. Following successful completion of Discovery and client approval, there is potential to transition into a larger and potentially full-time implementation engagement, with further opportunities around Azure platform improvement and ongoing infrastructure support. ABOUT THE CLIENT Founded in 1988, KD Pharma is a technology-driven CDMO (Contract Development & Manufacturing Organization) specializing in pharmaceutical and nutraceutical production, including ultra-pure Omega-3 concentrates. The company operates internationally, with locations across Germany, Norway, the UK, the USA, Canada and Peru, and provides end-to-end solutions from development and custom synthesis through to finished dosage forms. ABOUT THE PROJECT KD Pharma is modernising its data and reporting environment and defining a more scalable, maintainable Microsoft-based platform. The wider technology landscape spans Azure and on-premises infrastructure across multiple international locations, with a mix of modern and legacy business systems including Business Central, NAV, SQL-based applications and reporting solutions. Parts of the environment remain highly manual, with limited documentation, monitoring and infrastructure automation. The initial 6-week Discovery Phase will focus on understanding the current environment and defining the target architecture and implementation approach. From an Azure and infrastructure perspective, the team will: - Review the existing Azure and hybrid infrastructure, networking and security setup - Identify infrastructure, monitoring, resilience and operational gaps - Define the target Azure infrastructure, identity and security approach - Define appropriate IaC, automation and deployment practices - Contribute to PoC design, implementation estimates and the wider technical roadmap If Discovery is successful and the client approves the next stage, the project is expected to move into a longer-term implementation phase, starting with the agreed PoC and expanding into broader platform and infrastructure improvements. ABOUT THE ROLE This is a hands-on Azure DevOps Engineer role with architecture exposure. You will work closely with the Solution Architect, Senior Data Engineer and client stakeholders, taking primary responsibility for the Azure infrastructure, networking, identity, security and operational aspects of the proposed platform. The role requires someone comfortable working in a lean environment, assessing an existing setup with limited documentation, making practical technical recommendations and then helping implement the agreed solutions. RESPONSIBILITIES - Review the current Azure and hybrid infrastructure and contribute to target architecture, PoC scope, implementation planning and estimates - Design, manage and improve Azure and hybrid infrastructure in line with business and technical requirements - Support cloud and hybrid networking, including site-to-site VPN, Azure Virtual WAN / hub-and-spoke architectures, Azure Firewall, Bastion and VNet connectivity - Support identity and access management across Entra ID and on-premises Active Directory - Contribute to cloud and infrastructure security, including credential and secrets-management practices - Improve infrastructure reliability, monitoring and alerting, building on existing Defender and Sentinel tooling - Review and strengthen backup, recovery and disaster-recovery practices across Azure and on-premises infrastructure - Build and improve infrastructure automation, CI/CD and Infrastructure as Code practices using Bicep and/or Terraform - Support legacy Windows Server, SQL Server and on-premises virtualisation environments while contributing to modernisation and migration planning - Contribute to cloud architecture, Azure governance, platform standards and technical documentation - Collaborate with technical and business stakeholders throughout Discovery and implementation ESSENTIAL KNOWLEDGE, SKILLS & EXPERIENCE - 5+ years of experience in cloud, infrastructure or platform engineering - Strong hands-on experience with Microsoft Azure and production cloud infrastructure - Strong experience with Azure and hybrid networking, including site-to-site VPN, Virtual WAN / hub-and-spoke architectures, Azure Firewall and Bastion - Hands-on experience with Entra ID, on-premises Active Directory and hybrid identity/access management - Strong understanding of cloud and infrastructure security principles - Experience troubleshooting complex cloud and hybrid infrastructure issues - Strong understanding of cloud architecture and solution-design principles - Hands-on Infrastructure as Code experience with Bicep and/or Terraform - Experience with infrastructure automation and CI/CD, ideally including introducing these practices into less mature environments - Experience with monitoring, alerting, reliability, backup and recovery across hybrid infrastructure - Experience with Windows Server and on-premises virtualisation platforms such as VMware, Hyper-V or similar; experience with legacy infrastructure is highly relevant - Ability to assess existing environments, identify technical gaps and translate findings into practical solutions - Ability to work independently in environments with limited documentation or established processes - Strong English and confidence communicating with technical and non-technical stakeholders NICE-TO-HAVE - Azure architecture or security certifications - SRE experience - Experience supporting Azure-based data platforms or working closely with data engineering teams - SQL Server administration or migration experience, including Azure SQL Managed Instance - Experience with legacy ERP infrastructure or ERP modernisation programmes - Experience working in pharmaceutical, manufacturing or other regulated environments - Familiarity with infrastructure compliance requirements such as GDPR, GxP or SOC 2 - Experience designing Azure management-group / subscription-governance models - Multi-cloud experience, particularly GCP INTERVIEW STEPS 1. GT interview with Recruiter 2. Technical interview 3. Final interview 4. Offer