Senior Azure DevOps Engineer

What success looks like in this role:

Responsibilities: 

• Design, implement, and manage automated Infrastructure as Code (IaC) solutions leveragingAzure Bicep andAzure Verified Modules (AVM) to deploy, configure, and standardize enterprise landing zones and workload infrastructure.
• Provision, maintain, and automate core enterprise networking architectures, includingAzure Virtual WAN (VWAN), Virtual Hubs (VHUB), VNets, Subnets, NSGs, Route Tables, and Private Endpoints/Private DNS Zones.
• Manage application traffic routing, SSL offloading, and secure entry points usingAzure Application Gateway (App GW) / WAF.
• Support compute and storage lifecycles by automating the deployment and configuration ofAzure Virtual Machines (VMs), Storage Accounts, and Azure Key Vault for secure secret/certificate management.
• Support containerized application workloads by implementing, configuring, and maintainingAzure Container Apps (ACA) and Azure Container Registry (ACR).
• Develop, maintain, and optimize robustAzure DevOps CI/CD pipelines (multi-stage YAML) to automate validation (Bicep linting, what-if analysis), testing, and deployment of both infrastructure and application workloads.
• Manage, curate, and contribute to internal module libraries usingAVM standards, establishing best practices for parameterization, tagging, telemetry, and reusable cloud infrastructure components.
• Implement DevSecOps practices across deployment pipelines, integrating secret management, RBAC, Managed Identities, and security scanning into CI/CD workflows.
• Manage version control workflows, branching strategies, and release governance within Azure Repos / Git.
• Configure and maintain monitoring, alerting, and logging usingAzure Monitor and Log Analytics across network, compute, and container workloads.
• Develop and enhance automation scripts usingPowerShell, Azure CLI, or Bash to streamline operational tasks and recurring environment management workflows.
• Maintain comprehensive technical documentation, including network topology diagrams, pipeline configurations, Bicep/AVM module guides, and runbooks.

#LI-SN1

You will be successful in this role if you have:

• Minimum 5 years of hands-on experience as a DevOps Engineer, Cloud Engineer, or Infrastructure Automation Engineer.
• Deep hands-on expertise withInfrastructure as Code (IaC) usingAzure Bicep, with demonstrated experience leveraging and implementingAzure Verified Modules (AVM).
• Strong, proven experience with coreMicrosoft Azure Services:
  • Networking: Azure Virtual WAN (VWAN), Virtual Hub (VHUB), VNets, Subnets, Network Security Groups (NSGs), Route Tables, and Private Endpoints.
  • Traffic & Security: Azure Application Gateway (App GW / WAF) and Azure Key Vault.
  • Compute & Containers: Azure Container Apps (ACA), Azure Virtual Machines (VMs), and ACR.
  • Storage: Azure Storage Accounts (Blob, File shares, Data Lake, Access tiers, and network access restrictions).
• Strong proficiency in designing and implementingAzure DevOps Pipelines (multi-stage YAML pipelines, service connections, environments, approvals, and deployment gates).
• Strong scripting and automation skills usingPowerShell, Azure CLI, or Bash (Python is a plus).
• Solid understanding of cloud security fundamentals, includingAzure RBAC, Entra ID (Azure AD), and Managed Identities.
• Hands-on experience with containerization fundamentals (Docker) and deploying microservices toAzure Container Apps.
• Experience with IaC validation and testing tools (Bicep linter, ARM what-if operations, PSRule).
• Experience with monitoring, diagnostics, and telemetry usingAzure Monitor, Log Analytics, and Network Watcher.
• Excellent documentation, analytical troubleshooting, and communication skills.
• Relevant Azure certifications (e.g.,AZ-104: Azure Administrator Associate,AZ-700: Azure Network Engineer Associate, orAZ-400: DevOps Engineer Expert) are an added advantage.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.

If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization atGlobalRecruiting@unisys.com. US job seekers can find more information about Unisys’EEO commitment here.