Who we are
We're Rubixx, the fastest-growing social housing software provider in the UK. Our platform runs the back office for housing associations (and beyond) up and down the country, and we're scaling fast. That growth needs someone to build the platform foundations underneath it all, which is where you come in.
The role
This is a hands-on platform engineering role with real room to grow. Our Azure-hosted, multi-tenant SaaS is scaling quickly, and we need our infrastructure to grow with it: You'll primarily work on infrastructure defined as code, disaster recovery, and load testing we can trust.
If you've been quietly building the platform foundations under someone else's name and you're ready to step up and make them yours - read on.
What you'll build
Infrastructure as Code. Bring our Azure estate under Bicep or Terraform. You'll shape the structure and conventions, codify Dev, QA, Test and Production, and get everything under version control so the platform is defined in code rather than clicked together in the portal.
Disaster recovery you can trust. Build and maintain our DR runbooks and run scheduled scenario tests against agreed recovery targets, including proper backup-restore validation. You'll report on how we did and take the lead on the improvements those tests surface.
Load & performance testing. Stand up a repeatable load-testing capability from scratch. Run tests against realistic multi-tenant load, find the bottlenecks, and bring clear, evidence-based findings back to the team.
Secrets & Key Vault operations. Provision and maintain Key Vault entries and app configuration through your IaC, and operate secret and API-key rotation to a policy we agree together - running rotations, catching expiring secrets before they bite, and applying our security baseline (managed identity over stored credentials, least privilege). You'll work within the platform's security model and help shape how it matures.
Deployment & documentation. Deploy infrastructure changes through our Azure DevOps pipelines, coordinated with application releases on our 8-week cadence and tested in staging before they hit production. Keep it all documented as code and in clear, current reference material.
Where you can take it
This role is scoped to building and operating these capabilities - but the ownership is there to grow into. As the platform matures and you establish yourself, there's a clear path to take on the security model, the recovery and performance objectives, and wider architecture decisions: moving from delivering the strategy to shaping and setting it. Progression is based on what you demonstrate, and your pay grows with the scope you take on.
What we need from you
Day one, you'll need:
- Infrastructure as Code - hands-on Bicep and/or Terraform. Having taken an existing, hand-built Azure estate and brought it under IaC is a real plus.
- Azure infrastructure - solid working knowledge of App Service, Azure SQL, Service Bus, Storage, Key Vault and Application Insights.
- Azure networking - VNets, subnets, NSGs, private endpoints and private DNS, particularly for locking down PaaS services, and expressing that networking in IaC.
- Secrets & identity - practical experience with Key Vault, managed identities, and rotating secrets and API keys without causing downtime.
- CI/CD - comfortable deploying through Azure DevOps pipelines.
- Scripting - PowerShell, Bash or equivalent for automation.
- A methodical head for recovery - a working understanding of backup, restore and RTO/RPO, and the discipline to actually test them.
Nice to have:
- Experience building or running load / performance tests.
- Designing Azure network topology from scratch (hub-and-spoke, Front Door / Application Gateway with WAF, gateways, routing) - desirable, and something you can grow into.
- Awareness of multi-tenant SaaS infrastructure and its resilience and performance implications.
- A relevant Microsoft certification (e.g. Azure Administrator Associate, AZ-400 DevOps Engineer Expert).
- An eye for cost - making efficient use of the Azure estate.
Just as important: you're self-motivated and happy to take a brief and run with it, you bring your own recommendations rather than wait to be told, you're comfortable being the first to build something new, and you communicate clearly to both technical and non-technical people. You'll enjoy collaborating with a tight-knit team.
What you'll get from us
We're a bit different from the norm, and we think that's a good thing. No egos, no politics, no judgements - just a team that looks after each other and grows together.
The practical stuff:
- Flexitime
- On-site parking
- On-site gym
- Modern, comfortable office - we even have our own on-site bar
- As much tea, coffee and hot chocolate as you can drink
- Active monthly socials - karting, darts, bowling, pool, quiz nights, table tennis, foosball - with the trophies to prove it
Where and when
This role is based on-site at our Head Office in Stoke-on-Trent. It's a permanent, full-time position.
Interested?
Take a look around: https://vimeo.com/944007097/3e45d7a9b2?share=copy
A note for recruiters: no matter how "different" you are, we're not engaging agencies for this role. Please don't get in touch.
Pay: £50,000.00-£55,000.00 per year
Benefits:
- Casual dress
- Flexitime
- Free parking
- On-site parking
Work Location: In person
