Cloud Hosting Engineer

Moneycorp powers global payments for corporates, institutions and high net worth individuals, combining worldwide reach with local expertise. With over 45 years of market experience, two banking licences and offices in 11 countries, our technology delivers 24/7 accessibility, while our people deliver award-winning service. In 2024, we supported $1tn+ of payment volume, reaching 190 countries in 130 currencies. Our 32k+ corporate clients benefit from our regulatory resilience with 63+ permissions globally, access to major payment rails, and our proprietary technology.   

Moneycorp is a place where energy, commitment, and collaboration are core to our values of shared success. We’re restless in our drive to surpass the expectations of our customers and unlock opportunities to support them at every stage of their journey. The foundation of our success is our people, and nurturing a culture of belonging for all our colleagues is central to our journey as a global business.  

We are seeking a Cloud Hosting Engineer to build, run and improve the Azure hosting services that our application teams deploy onto: container platforms, App Services, Functions and long-lived virtual machines.

As Cloud Hosting Engineer, you are the "run it as a product" voice. Application teams, developers and application services are your customers. You give them hosting that is secure by default, self-service where it can be, and measured against service level objectives they have agreed to. When something is manual, you automate it. When something breaks, you fix the cause, not just the symptom.

The aim is to manage hosting at scale and operate at pace without trading away security or fitness for purpose. That means infrastructure as code for everything, a fleet that is patched and configured by automation rather than by hand, and changes that go out through pipelines which produce their own evidence.

You are part of the on-call rota for the production hosting estate.

• Build and run hosting services from the service catalogue, each with a clear owner, documentation and onboarding path
• Deliver self-service golden paths so application teams can deploy standard workloads without raising tickets
• Onboard application teams and help them choose the right hosting pattern for their workload
• Gather feedback from consuming teams and turn it into backlog items that make the services easier to use
• Keep services current through their lifecycle: version upgrades, deprecations and retirement

• Build and maintain hosting infrastructure in OpenTofu/Terraform, consuming the shared platform modules
• Manage long-lived virtual machines at scale through OS and stack automation (for example Ansible), so configuration is repeatable and drift is detected and corrected
• Build and maintain golden images and patching pipelines for Windows and Linux
• Replace manual operational tasks with automation, and keep a list of the toil that remains

• Ship hosting changes through pipelines that act as the change record: tests, policy checks and approvals produce the evidence, so routine changes run as pre-approved standard changes
• Use immutable images and rebuild rather than patch in place where the workload allows
• Release with blue/green or canary patterns and automated rollback
• Track delivery performance with the DORA metrics: deployment frequency, lead time for changes, change failure rate and time to restore service

• Define service level objectives for hosting services with consuming teams, and report against them
• Build monitoring, logging, alerting and dashboards, and cut alert noise so pages mean something
• Build auto-remediation runbooks and self-healing for known failure modes
• Take part in the on-call rota, incident response and blameless post-incident reviews
• Run backup and disaster recovery and take part in recovery tests

• Deliver hosting that is secure by default: managed identities, private endpoints, least-privilege RBAC, Key Vault for secrets
• Meet patching and vulnerability remediation targets across images, containers and virtual machines
• Produce evidence for operational resilience and regulatory requirements: UK operational resilience (FCA PS21/3, PRA SS1/21), EU DORA and US FFIEC examination expectations
• Make cost-aware choices at design and pull-request time: right-size resources, apply tagging standards, follow cost-effective patterns and act on unusual spend

Essential Knowledge, Skills & Experience:

• 3+ years hands-on engineering in cloud hosting, infrastructure, platform or SRE roles
• Running production workloads on Azure: App Service, Functions, containers and virtual machines
• Infrastructure as code with OpenTofu/Terraform in a team setting, with code review and pipelines
• Configuration management of Linux and Windows servers at scale (for example Ansible)
• Building and operating a container platform in production
• Taking part in on-call and incident response for production services

Skills:

• Azure hosting: App Service, Functions, Container Apps, virtual machines and scale sets, Azure Compute Gallery, Azure Update Manager
• Infrastructure as code: OpenTofu/Terraform modules, state, testing and pipeline delivery
• Automation: Ansible or similar, plus PowerShell, Bash or Python
• CI/CD: GitHub Actions or Azure DevOps, deployment strategies and rollback
• Observability: Azure Monitor, Log Analytics, Application Insights, alerting and dashboards
• Security: Entra ID, managed identities, RBAC, Key Vault, private endpoints, vulnerability and patch management
• Networking (as a consumer): DNS, private endpoints, ingress and egress, troubleshooting connectivity

Desirable Knowledge, Skills & Experience:

• AZ-104 Azure Administrator certification
• Azure Container Apps in production
• Image pipelines with Packer or Azure Image Builder
• Progressive delivery tooling
• Working in a regulated financial services environment
• Using AI-assisted tooling for operations and automation
• FinOps Practitioner certification or hands-on cost optimisation

Education:

• Relevant degree desirable, or equivalent competencies in college. 

We're committed to creating a workplace where every individual feels valued, respected, and included. As an Equal Opportunity Employer, we actively cultivate an inclusive culture where diversity thrives, and we empower our colleagues to drive meaningful change within our organization through Employee Engagement initiatives and value champion networks. 
 
Like many of our peers, we recognize that fostering inclusivity is an ongoing journey, and we remain steadfast in our commitment to progress. By measuring our efforts through regular assessments and listening to the feedback of our employees, we strive to ensure that our initiatives are impactful and responsive to the evolving needs of our workforce. 
 
Together, we want to build a workplace where everyone can bring their authentic selves to work, as we believe this is the foundation of innovation, creativity, and collective success.  

If this role sounds like a good fit for you, please click on the “Apply Now” button to submit your application.

To discover more about Moneycorp and how we’re leading the way in global payments and currency risk management, please visit our News Hub and various social media platforms Facebook, Twitter UK, Twitter Americas, Instagram, LinkedIn.