Azure Cloud DevOps Engineer

Team:
Platform / SRE / Cloud Engineering

Reports to:
Head of DevOps | Engineering Manager

Role Summary

You'll design, build, and operate secure, scalable, and cost-efficient infrastructure on Microsoft Azure. You'll own CI/CD, infrastructure as code, observability, and reliability practices that let our product teams ship fast and safely.

What You'll Do

• Design & build on Azure:
  Create resilient architectures using AKS, App Services, Functions, ACR, App Gateway/Front Door, VNets (hub-spoke), Private Link, NSGs, Azure Firewall, Load Balancers, Key Vault, Storage, SQL/Managed Instance/Cosmos DB.
• Infrastructure as Code:
  Author, review, and version Terraform/Bicep modules (and occasional ARM), implement reusable patterns, manage state and environments.
• CI/CD:
  Implement pipelines (Azure DevOps or GitHub Actions) for build/test/deploy; enable blue/green & canary releases; automate database and infra migrations.
• Containers & runtime:
  Build Docker images, manage Helm charts, ingress, secrets, and scaling for AKS; optimize cluster cost and reliability.
• Security & compliance:
  Integrate Azure AD (Entra ID), RBAC, Managed Identities, Azure Policy, Defender for Cloud; drive least-privilege and vulnerability remediation; support audits (ISO 27001, SOC 2).
• Observability & SRE:
  Set up Azure Monitor, Log Analytics, Application Insights; define SLI/SLOs, alerts, runbooks, error budgets; lead incident response and postmortems.
• Networking:
  Implement secure connectivity (ExpressRoute/VPN), DNS, peering, routing, and egress controls.
• Cost & performance:
  Right-size resources, tag and track spend, implement budgets and alerts; performance test and tune services.
• Collaboration:
  Partner with developers to "shift left" on reliability and security; mentor peers; contribute to platform roadmap and documentation.
• Automation & tooling:
  Script with PowerShell/Bash/Python; build internal tools, templates, and guardrails.

Education

• Bachelor's in CS/CE or equivalent practical experience.

Required Qualifications

• 3-5+ years in DevOps/SRE/Cloud Engineering, including 2+ years hands-on with
  Microsoft Azure
  .
• Proficiency with
  Terraform
  or
  Bicep
  ,
  Git
  , and modern CI/CD (Azure DevOps or GitHub Actions).
• Strong experience with
  AKS
  (or Kubernetes elsewhere), Docker, Helm, and secrets management (Key Vault).
• Solid grasp of
  networking fundamentals
  (VNet, DNS, SSL/TLS, load balancing, routing, firewalls).
• Production experience with
  monitoring/alerting
  (Azure Monitor, App Insights, Log Analytics) and on-call.
• Scripting ability in
  PowerShell
  and/or
  Bash
  (Python a plus).
• Understanding of
  cloud security
  (identity, RBAC, policies, encryption) and
  IaC best practices
  .
• Clear, pragmatic communicator; able to document designs and guide others.

Nice to Have

• Azure certifications (AZ-104, AZ-400, AZ-305).
• Experience with
  Event Hub
  ,
  Service Bus
  ,
  Cosmos DB
  ,
  Redis
  ,
  Data Factory
  ,
  Purview
  .
• Secrets & config with
  Azure Key Vault + CSI
  ,
  SOPS
  , or
  External Secrets
  .
• Service mesh (e.g.,
  Open Service Mesh/Linkerd
  ), API management (
  APIM
  ).
• Policy as code (e.g.,
  OPA/Conftest
  ), container scanning (Defender for Cloud, Trivy).
• Experience in regulated environments (PCI, HIPAA) and disaster recovery design.

Core Competencies

• Systems thinking & reliability engineering
• Automation & platform mindset
• Security-by-default
• Incident ownership & calm under pressure
• Collaborative enablement of product teams

Success Metrics (KPIs)

• Deployment throughput & lead time:
  ↑ releases/week, ↓ PR-to-prod time.
• Change failure rate:
  ↓ % of failed deploys;
  MTTR:
  ↓ time to restore service.
• Availability vs SLOs:
  % services meeting targets; error budget policy adherence.
• Cost efficiency:
  $/env within budget; reserved/savings plan coverage.
• Infra drift & compliance:
  IaC-managed resources; policy violations resolved on SLA.
• Security posture:
  Vulnerabilities & misconfigurations remediated within SLA.

Example Responsibilities by Seniority

• Mid-level:
  Implement pipelines, write modules, maintain AKS workloads, respond to incidents.
• Senior:
  Architect platform patterns, drive SLOs and chaos/DR tests, lead incident reviews, mentor engineers.
• Staff/Principal:
  Set cloud strategy, create golden paths, govern multi-subscription/landing zones at scale.

Tools You'll Likely Use

Azure DevOps / GitHub, Terraform/Bicep, AKS, Docker, Helm, Key Vault, Azure Monitor, Log Analytics, App Insights, Azure Policy, Defender for Cloud, App Gateway/Front Door, APIM, PowerShell, Bash, Python.

Benefits

• Regina Maria private healthcare subscription
• Complimentary budget on the Benefit platform
• Bookster subscription