Azure DevOps Engineer

This is a fully remote position, open to applicants in Europe.

📋 Description

• Evaluate the existing Azure and hybrid infrastructure, contributing to the target architecture, PoC scope, implementation planning, and estimates.

• Design, manage, and enhance Azure and hybrid infrastructure in alignment with business and technical requirements.

• Provide support for cloud and hybrid networking, which includes site-to-site VPN, Virtual WAN / hub-and-spoke architectures, Azure Firewall, Bastion, and VNet connectivity.

• Assist in identity and access management utilizing Entra ID and on-premises Active Directory.

• Contribute to the security of cloud and infrastructure, focusing on credential and secrets management practices.

• Enhance infrastructure reliability, monitoring, and alerting, building upon existing Defender and Sentinel tools.

• Assess and improve backup, recovery, and disaster recovery practices for both Azure and on-premises infrastructure.

• Develop and refine infrastructure automation, CI/CD, and Infrastructure as Code methodologies using Bicep and/or Terraform.

• Support legacy Windows Server, SQL Server, and on-premises virtualization environments while aiding in modernization and migration planning.

• Contribute to cloud architecture, Azure governance, platform standards, and technical documentation.

• Collaborate with the Solution Architect, Senior Data Engineer, client stakeholders, and technical and business stakeholders throughout the Discovery and implementation phases.

• During the initial 6-week Discovery phase, evaluate the current environment, identify gaps, define the target architecture and implementation strategy, and contribute to the PoC design, estimates, and the technical roadmap.

⛳️ Requirements

• Over 5 years of experience in cloud, infrastructure, or platform engineering.

• Extensive hands-on experience with Microsoft Azure and production cloud infrastructure.

• Proficient in Azure and hybrid networking, including site-to-site VPN, Virtual WAN / hub-and-spoke architectures, Azure Firewall, and Bastion.

• Practical experience with Entra ID, on-premises Active Directory, and hybrid identity/access management.

• Strong grasp of cloud and infrastructure security principles.

• Experience in troubleshooting complex cloud and hybrid infrastructure issues.

• Solid understanding of cloud architecture and solution design principles.

• Hands-on experience with Infrastructure as Code using Bicep and/or Terraform.

• Familiarity with infrastructure automation and CI/CD processes.

• Knowledge of monitoring, alerting, reliability, backup, and recovery across hybrid infrastructure.

• Experience with Windows Server and on-premises virtualization platforms such as VMware, Hyper-V, or similar.

• Capability to evaluate existing environments, identify technical gaps, and translate findings into actionable solutions.

• Ability to work independently in settings with limited documentation or established processes.

• Strong English proficiency and confidence in communicating with both technical and non-technical stakeholders.

• Azure architecture or security certifications are preferred.

• Experience in Site Reliability Engineering (SRE) is a plus.

• Familiarity with supporting Azure-based data platforms or collaborating with data engineering teams is advantageous.

• SQL Server administration or migration experience, including Azure SQL Managed Instance, is an asset.

• Exposure to legacy ERP infrastructure or ERP modernization programs is beneficial.

• Experience in pharmaceutical, manufacturing, or other regulated environments is a plus.

• Knowledge of GDPR, GxP, or SOC 2 is desirable.

• Experience in designing Azure management-group/subscription governance models is advantageous.

• Multi-cloud experience, especially with GCP, is a plus.

🏝️ Benefits

• Opportunity for transition to a larger and potentially full-time implementation role following a successful Discovery phase and client approval.

• Additional opportunities for Azure platform enhancement and ongoing infrastructure support.