Cloud/ DevOps Engineer (Azure, Databricks, Terraform)

Our client, a prestigious global investment management firm, is seeking a Cloud/ DevOps Engineer to join their technology team in Vilnius, Lithuania. This is a unique opportunity to work on cloud infrastructure automation, data platform modernization, and application security within the fast-paced world of hedge funds. The role offers an initial fixed-term contract of 6–12 months, with the possibility of extension, making it an exciting opportunity for an engineer looking to apply their expertise to impactful technical projects in a dynamic investment environment.

Key responsibilities

We're looking for an Engineer to take on an initial key project focused on automating the infrastructure of an existing Microsoft Excel add-in, migrating its data layer from PostgreSQL to Azure Databricks, and strengthening the application's security.

• Build a Terraform project for the add-in's Azure infrastructure and import the resources that already exist.

• Move the add-in's backend from a direct PostgreSQL connection to Azure Databricks, using per-user authentication (the OAuth 2.0 on-behalf-of flow with MSAL) so that Unity Catalog permissions apply to each user.

• Connect to Databricks through the SQL Statement Execution API or the Databricks SQL Node.js driver.

• Replace stored secrets with managed identities and federated credentials on Entra ID app registrations.

• Configure app registration API permissions, and document the access users need (workspace access, SQL warehouse permissions, Unity Catalog grants).

• Harden the application's security:

  • Tighten token validation;
  • Move hardcoded API keys into Azure Key Vault;
  • Change data upload endpoints so the data travels in the request body instead of the query string.

Your profile

• Microsoft Azure (Container Apps, Entra ID / app registrations, managed identities, Key Vault);
• Azure Databricks (SQL warehouses, Unity Catalog);
• Terraform, including importing existing resources;
• OAuth 2.0 / MSAL authentication flows;
• Good grasp of application security practices;
• Nice to have: TypeScript / Node.js, Office add-in development experience.

What we offer

• Direct ownership of your project and exposure to a broad technology environment.
• Opportunity to work closely with business stakeholders and decision-makers.
• Freedom to improve existing IT processes, tools and infrastructure and introduce new solutions.
• Competitive compensation package starting from €7,000+ gross, with the final offer reflecting the candidate’s experience and level of expertise.
• Performance-based bonus linked to individual results.