Lead DevOps Engineer

We're looking for a skilledLead DevOps Engineer to guide the development and delivery of a Unified Automation Platform. This person will drive technical strategy for the Backstage developer portal, infrastructure automation, cloud provisioning (Azure & VMware), security integration, and observability. The ideal candidate blends great technical skills with leadership abilities to advance Platform Engineering and enterprise-scale self-service automation.

Responsibilities

• Support the design and build-out of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)
• Build multi-tenancy structures with org hierarchy and detailed RBAC that go beyond basic authentication
• Connect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications
• Create golden path templates and self-service workflows for development teams
• Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible
• Set up GitOps workflows to manage continuous deployment and drift
• Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)
• Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards
• Develop and maintain image factory pipelines for VM and container golden images

Requirements

• Over 5 years of DevOps engineering experience, with strong skills in Terraform/OpenTofu and Ansible
• At least 1 year of leadership experience
• Solid understanding of Azure networking and security services, such as VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables
• Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps
• Strong knowledge of Azure databases, such as Azure SQL, Cosmos DB, and Azure Postgres
• Deep expertise in Kubernetes/AKS provisioning, cluster management, ops dashboards, and Docker
• Proven skills in Azure DevOps (ADO) pipeline automation and integration
• English proficiency at B2 level or above

Nice to have

• Experience with Backstage, including developer portals, plugins, Scaffolder, TechDocs, Software Catalog, and Search, plus self-service platform design and multi-tenancy/RBAC models
• Familiarity with GitOps tools like ArgoCD or Flux, along with continuous deployment and drift management
• Background in Identity & Access Management, covering Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, and RBAC
• Knowledge of Secrets Management tools such as Azure Key Vault, OpenBao/HashiCorp Vault, and dynamic secrets
• Scripting and automation skills in Python, Bash, PowerShell, and REST API integration
• Understanding of networking tools, including DNS automation and IPAM (NetBox)
• Awareness of observability practices, such as monitoring, metrics, logging, and basic tooling
• Experience with VMware virtualization, including vSphere, vSAN, NSX-T, SRM, and DRS
• Exposure to Azure VMware Solution (AVS) for hybrid/on-prem workload management
• Expertise in Image Factory pipelines for VM and container golden images
• Knowledge of Certificate Management tools like Venafi
• Experience implementing Policy as Code using OPA or similar policy engines
• Familiarity with Privileged Access Management (PAM), including break-the-glass integration
• Understanding of DevSecOps tooling, such as SAST, DAST, SCA, IAST, and ASPM integration
• Experience with Security Alerting through SIEM and WAF integrations
• Knowledge of firewall platforms like PaloAlto, F5, and Cloudflare
• Familiarity with ITSM/CMDB integration, including component request workflows and artifact repositories
• Experience with Vulnerability Management dashboards and reporting
• Skills in Documentation Automation, including generating Solution Design Documents (SDD)