Senior DevOps Engineer

Overview

This position involves architecting, implementing, and managing secure, scalable Azure cloud infrastructure to support enterprise platforms and AI workloads. The role encompasses full lifecycle engineering including infrastructure as code (IaC), automation of deployments, verification processes, and continued maintenance to guarantee high platform availability, security, and ongoing enhancement.

Key Responsibilities

• Develop the landing zone by designing and deploying spoke networks, firewall policies, private DNS, ingress components such as Application Gateway/WAF, and shared platform services using Bicep templates via Azure DevOps pipelines with deployment stacks and compliance gates.
• Lead migration initiatives involving application waves, creating new environment targets, moving SQL Server databases through backup/restoration, log shipping, and AlwaysOn availability on Azure VMs, as well as orchestrating file-share and data relocations with safe transfer paths, parallel operations, and rollback contingency plans.
• Implement identity and access management solutions utilizing Entra ID authentication mechanisms (SSO/SAML) for entity onboarding, just-in-time access via Privileged Identity Management, managed identities deployments, and entitlement management scripted as code.
• Ensure observability and operability by establishing diagnostic settings, Log Analytics, Grafana dashboards, alerts, automated smoke tests, and comprehensive operational documentation embedded in all deliverables.
• Enforce robust security postures such as exclusively using private endpoints for Platform as a Service offerings, routing egress traffic through central firewalls with forced tunneling, adopting zero-trust models for Cloud PC access, and applying Azure Policy guardrails with operational discipline to adhere to and improve governance standards.
• Maintain and operate the platforms created by handling incident triage through firewall logs, Kusto Query Language (KQL), and activity logs; engage in change management reviews; and produce thorough documentation aligning with team standards.

Qualifications and Experience

• More than 7 years in infrastructure or platform engineering roles with a minimum of 3 years direct, hands-on experience in large-scale Azure environments.
• Expertise with infrastructure as code tools—preferably Bicep, with Terraform as an alternative—and proficiency in Git workflows including branching and pull requests, along with CI/CD orchestration in Azure DevOps or GitHub.
• Advanced understanding of Azure networking paradigms such as hub-and-spoke topology, firewall configuration and policies, user-defined routes, private endpoints, Private DNS, VPN/ExpressRoute, and Application Gateway with Web Application Firewall.
• Strong skills in identity engineering covering Entra ID, federation protocols (SAML/OIDC), Privileged Identity Management, role-based access control (RBAC), managed identities, and scripting with Microsoft Graph API.
• Fluent scripting abilities, primarily in PowerShell, with Python considered advantageous; adeptness in working with REST APIs for automation when command-line tools are limited.
• Proven experience managing migrations of significant scale, including datacenter or tenant cloud transitions, database migration and cutover strategies.
• Sound working knowledge of SQL Server databases sufficient to manage backups, restores, authentication models, and availability groups confidently without requiring DBA-level expertise.
• Excellent written communication skills emphasizing clear, thorough pull request descriptions, architecture documentation, and operational runbooks.