DevOps Engineer

Position Summary:

The Azure Cloud and CI/CD Subject Matter Expert owns the architecture, engineering, automation, security, governance, cost optimization, and operational maturity of Microsoft Azure environments and software delivery platforms. This hands-on role establishes cloud and Dev SecOps standards, builds reusable infrastructure and deployment patterns, and partners with application, security, finance, product, and operations teams to deliver secure, resilient, observable, and cost-effective services.

CRITICAL PRIORITY - AZURE COST SAVINGS: Continuously identify, quantify, prioritize, and deliver measurable Azure savings while protecting availability, security, performance, and business requirements.

Key Responsibilities

• Serve as the technical authority for Azure architecture, platform engineering, networking, identity, security, governance, resiliency, and operations.

• Design and implement landing zones, management-group and subscription structures, resource organization, naming, tagging, policy, and role-based access-control standards.

• Build and maintain CI/CD pipelines using Azure DevOps and/or GitHub Actions for application, database, container, and infrastructure deployments.

• Develop reusable Infrastructure as Code using Terraform and/or Bicep/ARM, with version control, peer review, automated validation, testing, and controlled promotion between environments.

• Implement secure pipeline practices including workload identity or service connections, secrets management, artifact integrity, dependency scanning, SAST, container scanning, approvals, and separation of duties.

• Architect Azure networking, including VNets, subnets, NSGs, routing, private endpoints, Private DNS, VPN/ExpressRoute, Application Gateway, WAF, Load Balancer, and Azure Firewall patterns.

• Design identity and privileged-access solutions using Microsoft Entra ID, managed identities, RBAC, Conditional Access, MFA, PIM, and least-privilege principles.

• Establish monitoring and observability through Azure Monitor, Log Analytics, Application Insights, alerts, dashboards, diagnostic settings, and actionable operational runbooks.

• Own Azure cost optimization and FinOps execution: establish budgets and alerts; analyze Cost Management, Advisor, utilization, and billing data; eliminate waste; right-size resources; schedule non-production workloads; optimize storage; and evaluate Reservations, Savings Plans, licensing, and architectural alternatives.

• Create a prioritized savings backlog with documented baselines, forecasts, owners, target dates, realized savings, avoided costs, and validation that changes do not introduce unacceptable operational or security risk.

• Lead technical reviews, troubleshoot complex deployment and cloud-platform issues, perform root-cause analysis, and drive durable corrective actions.

• Create architecture diagrams, pipeline standards, implementation guides, operational procedures, and evidence supporting security, compliance, and change management.

• Mentor engineers and collaborate with development, database, networking, security, quality, product, and vendor teams.

Required Qualifications

• Extensive hands-on experience architecting, implementing, securing, and operating enterprise Microsoft Azure environments.

• Expertise with Azure DevOps Pipelines and/or GitHub Actions, including YAML pipelines, templates, reusable workflows, environments, approvals, artifacts, variables, and release controls. Azure Cloud & CI/CD SME

• Confidential recruiting document JOB REQUISITION | CLOUD ENGINEERING & DEVOPS

• Strong Infrastructure as Code experience with Terraform and/or Bicep/ARM, including modules, remote state, dependency management, validation, and environment promotion.

• Deep knowledge of Azure networking, Microsoft Entra ID, RBAC, managed identities, Key Vault, Azure Policy, Defender for Cloud, and Azure Monitor.

• Experience with Azure compute and platform services such as Virtual Machines, App Service, Functions, AKS, Container Registry, Storage, SQL, and managed databases.

• Strong scripting and automation skills using PowerShell and Azure CLI; working knowledge of Bash, JSON, YAML, and REST APIs.

• Experience integrating security and quality controls into Git-based pipelines, including pull requests, code review, secret scanning, SAST, dependency/container scanning, policy gates, approvals, artifact versioning, rollback, and auditable deployment records.

• Ability to diagnose cross-platform problems and design for high availability, backup, disaster recovery, business continuity, scalability, performance, and cost optimization. • Demonstrated experience delivering measurable Azure savings using Cost Management, Azure Advisor, budgets, tagging, right-sizing, Reservations, Savings Plans, Hybrid Benefit, storage lifecycle controls, and workload scheduling.

• Excellent documentation, stakeholder communication, technical leadership, and mentoring skills.

Preferred Qualifications

• Seven or more years in infrastructure, cloud, platform engineering, or DevOps, including at least four years of substantial Azure experience.

• Microsoft Azure and/or HashiCorp Terraform certification, supported by advanced production experience.

• Experience in regulated healthcare or another environment handling PHI, PII, or sensitive data, with knowledge of HIPAA, SOC 2, ISO 27001, NIST, or CIS controls.

• Experience with Kubernetes/AKS, Docker, Helm, GitOps, service mesh, or container-platform security.

• Experience creating cloud-cost dashboards, forecasts, showback/chargeback reporting, unit-cost metrics, and executive savings reports.

• Experience supporting tenant or subscription migrations, Azure Enterprise Agreement/billing structures, and multi-subscription governance.