Senior Cloud Hosting Engineer

Description

Who We Are:

Moneycorp powers global payments for corporates, institutions and high net worth individuals, combining worldwide reach with local expertise. With over 45 years of market experience, two banking licences and offices in 11 countries, our technology delivers 24/7 accessibility, while our people deliver award-winning service. In 2024, we supported $1tn+ of payment volume, reaching 190 countries in 130 currencies. Our 32k+ corporate clients benefit from our regulatory resilience with 63+ permissions globally, access to major payment rails, and our proprietary technology.

Moneycorp is a place where energy, commitment, and collaboration are core to our values of shared success. We’re restless in our drive to surpass the expectations of our customers and unlock opportunities to support them at every stage of their journey. The foundation of our success is our people, and nurturing a culture of belonging for all our colleagues is central to our journey as a global business.

Role Purpose:

We are seeking an experienced Senior Cloud Hosting Engineer to own the design, reliability and evolution of the Azure hosting services that our application teams deploy onto: container platforms, App Services, Functions and long-lived virtual machines.

As Senior Cloud Hosting Engineer, you are the "run it as a product, at scale" voice. Application teams, developers and application services are your customers. You decide what good hosting looks like for them, agree service level objectives with them, and make sure the services meet them. You turn hosting from something teams ask for into something they consume.

The aim is to manage hosting at scale and operate at pace without trading away security or fitness for purpose. You set the patterns that make that possible: infrastructure as code for everything, a fleet that is patched and configured by automation, and pipelines that are trusted as the change record.

This is a senior IC role - you lead through design, standards and example. You lead major incidents for the hosting estate and are the senior escalation point on the on-call rota.

Role Responsibilities:

Hosting Product Ownership

• Own one or more hosting services end to end: design, roadmap, documentation, consumer experience and retirement
• Design the hosting patterns and golden paths in the service catalogue, and decide which workloads fit which pattern
• Work with application teams to understand what they need, and measure whether the services are being adopted and why
• Feed hosting requirements into Platform Engineering for landing zones and shared modules
• Contribute to the hosting roadmap with the Hosting Lead and Cloud Architects

Scale & Automation Design

• Set the infrastructure as code standards for hosting in OpenTofu/Terraform, and review the work of other engineers against them
• Design OS and stack automation for long-lived virtual machines at scale (for example Ansible), including drift detection and correction
• Design the golden image and patching pipelines for Windows and Linux, with patch and vulnerability targets the estate can meet
• Find the biggest sources of toil and lead the work to remove them

Change at Pace

• Design the pipelines that act as the change record, and agree with change and risk teams which hosting changes run as pre-approved standard changes
• Set the patterns for immutable images, blue/green and canary releases, and automated rollback
• Use the DORA metrics (deployment frequency, lead time for changes, change failure rate, time to restore service) to find and fix what slows hosting change down

Reliability Leadership

• Agree service level objectives with consuming teams for each hosting service, and own the reporting against them
• Lead major incidents for the hosting estate and act as the senior escalation point on the on-call rota
• Run blameless post-incident reviews and make sure the actions get done
• Design auto-remediation and self-healing for known failure modes, and keep alerting focused on what needs a person
• Design disaster recovery for hosting services, and plan and lead the recovery tests

Security, Resilience & Regulation

• Make secure defaults part of every hosting pattern: managed identities, private endpoints, least-privilege RBAC, Key Vault for secrets
• Own how hosting services meet operational resilience and regulatory requirements: UK operational resilience (FCA PS21/3, PRA SS1/21) including important business services and impact tolerances, EU DORA including resilience testing and exit planning, and US FFIEC examination expectations
• Make sure the evidence for those requirements comes from the pipelines and tooling, not from manual collection
• Build cost-awareness into the hosting patterns: right-sizing, tagging standards, cost-effective defaults and a response to unusual spend

Mentoring & Standards

• Mentor Cloud Hosting Engineers through pairing, code review and incident shadowing
• Write and maintain hosting standards, runbooks and design notes
• Run demos and knowledge-sharing sessions for the team and for consuming teams

What We’re Looking For:

Essential Knowledge, Skills & Experience:

• 6+ years hands-on engineering in cloud hosting, infrastructure, platform or SRE roles
• Designing and running production hosting services on Azure at enterprise scale
• Expert OpenTofu/Terraform, including module design, state, testing and pipeline delivery
• Managing large fleets of Linux and Windows servers through configuration management (for example Ansible)
• Designing and operating a container platform in production
• Leading major incidents and post-incident reviews
• Defining service level objectives with service consumers
• Delivering in a regulated industry (financial services, healthcare, government)
• Mentoring engineers

Skills:

• Azure hosting: App Service, Functions, Container Apps, virtual machines and scale sets, Azure Compute Gallery, Azure Update Manager
• Infrastructure as code: OpenTofu/Terraform module and stack design, testing, policy as code
• Automation: Ansible or similar, plus PowerShell, Bash or Python
• CI/CD: GitHub Actions or Azure DevOps, progressive delivery and automated rollback
• Observability: Azure Monitor, Log Analytics, Application Insights, SLO reporting, alert design
• Security: Entra ID, managed identities, RBAC, PIM, Key Vault, private endpoints, vulnerability and patch management
• Resilience: backup, disaster recovery design and testing, availability zones and regional failover
• Networking (as a consumer): DNS, private endpoints, ingress and egress, troubleshooting connectivity

Desirable Knowledge, Skills & Experience:

• AZ-305 Azure Solutions Architect certification
• Azure Container Apps in production
• Image pipelines with Packer or Azure Image Builder
• Evidencing controls for FCA, PRA, DORA or FFIEC requirements
• Using AI-assisted tooling for operations and automation
• FinOps Practitioner certification or hands-on cost optimisation

Education:

• Relevant degree desirable, or equivalent competencies in college.

Please note: This is a full-time, permanent position. This is a hybrid role based in Bucharest. However, we welcome applications from candidates across Romania, and for those located outside of Bucharest, we are open to a fully remote working arrangement. Candidates must have the legal right to work in Romania.

Fostering a culture of belonging and inclusivity 

We're committed to creating a workplace where every individual feels valued, respected, and included. As an Equal Opportunity Employer, we actively cultivate an inclusive culture where diversity thrives, and we empower our colleagues to drive meaningful change within our organization through Employee Engagement initiatives and value champion networks. 
Like many of our peers, we recognize that fostering inclusivity is an ongoing journey, and we remain steadfast in our commitment to progress. By measuring our efforts through regular assessments and listening to the feedback of our employees, we strive to ensure that our initiatives are impactful and responsive to the evolving needs of our workforce. 
Together, we want to build a workplace where everyone can bring their authentic selves to work, as we believe this is the foundation of innovation, creativity, and collective success.

Interested?

If this role sounds like a good fit for you, please click on the “Apply Now” button to submit your application.

To discover more about Moneycorp and how we’re leading the way in global payments and currency risk management, please visit our News Hub and various social media platforms Facebook, Twitter UK, Twitter Americas, Instagram, LinkedIn.