DevOps Engineer

Role Overview

We are looking for an experienced DevOps Engineer to design, build, and maintain secure, scalable CI/CD pipelines for mobile, desktop, and cloud-native applications. The role focuses on release engineering, macOS-based CI infrastructure, Kubernetes deployments, and enforcing quality and compliance standards in a regulated environment.

You will work closely with Backend, Frontend, and QA teams to translate technical and regulatory requirements into reliable delivery pipelines, ensuring high standards of automation, security, and documentation.

Key Responsibilities

• Requirements Engineering: Collaborate with Backend, Frontend, and QA teams to gather and refine technical and regulatory requirements for CI/CD pipelines.

• Quality & Compliance: Enforce engineering best practices through code reviews, quality gates, and clear documentation aligned with compliance and regulatory standards.

• CI/CD Infrastructure (macOS): Design, operate, and maintain macOS-based build infrastructure, including capacity planning, agent provisioning, updates, caching, and security hardening.

• Mobile CI/CD: Build and maintain iOS and Android pipelines using Fastlane, covering signing, versioning, automated testing, internal distribution (Firebase), and beta releases (TestFlight, Play Console).

• Desktop CI/CD: Design and operate pipelines for macOS, Windows, and Linux, including code signing, packaging, and artifact publishing.

• Pipeline & Release Engineering: Design and optimise Azure DevOps pipelines using YAML, reusable templates, approvals, and environments.

• GitOps & Kubernetes Delivery: Manage application releases on Kubernetes using ArgoCD, including App-of-Apps patterns, sync strategies, and health checks.

• Quality Gates & Test Automation: Implement automated checks such as unit, integration, and E2E tests, static and dynamic analysis, coverage thresholds, linting, and dependency scanning.

• Kubernetes Operations: Deploy and upgrade workloads, manage Helm charts, and implement advanced rollout strategies (blue/green, canary).

• Artifact Management: Operate and govern artifact repositories (e.g. JFrog Artifactory), ensuring traceability and supply chain security.

• Security & Secrets Management: Manage secrets, signing keys, and access controls using tools such as Key Vault or Vault; implement image scanning and policy-as-code (OPA, Conftest).

Required Skills and Experience

• Strong communication skills and ability to work closely with Backend, Frontend, and QA teams.

• Advanced knowledge of Git workflows and code review best practices.

• Experience with monorepo strategies and application build processes.

• Proven hands-on experience with Fastlane for mobile and desktop pipelines, including signing and artifact management.

• Solid expertise in CI/CD quality gates and test automation.

• Strong scripting skills (Bash or PowerShell).

• Experience setting up and maintaining macOS CI infrastructure (build agents, Xcode toolchains, certificates, profiles, caching).

• Strong hands-on experience with Azure DevOps, including YAML pipelines and environments.

• Strong experience working with Azure cloud services.

• Good understanding of containerisation (Docker) and security concepts (OIDC, RBAC).

• Production experience with Kubernetes and ArgoCD, including Helm-based deployments.

• Experience with artifact repositories (JFrog Artifactory, Sonatype Nexus, Azure Artifacts) and software supply chain security (artifact signing, SBOM).

• Commitment to maintaining clear documentation for regulated products.

Nice to Have

• Automation experience with App Store Connect and Google Play Console.

• Experience with policy and governance tools such as OPA Gatekeeper and Conftest.

• Familiarity with advanced deployment strategies (Argo Rollouts, feature flags).