Senior Azure DevOps Engineer

📋 Description

• In the role of Sr. Azure DEVOPS Engineer, you will take charge of critical support for all applications and infrastructure owned by the department.

• Your responsibilities will include ensuring effective monitoring, scalability, and resilience across all environments from testing to production.

• You will collaborate closely with the development team to troubleshoot and resolve code issues, as well as design and implement solutions for application build and deployment.

• Additionally, you will work alongside the software infrastructure and production assurance teams to establish platform provisioning and standardized configuration management.

• Your tasks will involve designing, constructing, and maintaining Azure landing zones and platform services (e.g., VNet, Private Endpoints, Key Vault, Azure Firewall/NSGs, Application Gateway/WAF).

• You will implement Infrastructure as Code (IaC) using Terraform and/or Bicep and enforce GitOps workflows (branching, PRs, policy checks).

• You will create reusable modules, pipelines, and standard patterns for application teams while advocating for automation-first methodologies.

• Defining and measuring SLIs/SLOs, error budgets, and reliability roadmaps for critical services will also be part of your role.

• You will implement and fine-tune observability (logs, metrics, traces) using Azure Monitor, Log Analytics, Application Insights, and Prometheus/Grafana where applicable.

• Conducting capacity planning, resiliency testing (chaos, failover, DR), and performance tuning across services will be required.

• You will develop secure and robust CI/CD pipelines (GitHub Actions / Azure DevOps Pipelines) with automated testing, scans, and approvals.

• Standardizing deployment strategies (blue/green, canary, rolling) for containerized and PaaS workloads will be expected.

• You will manage container platforms (AKS: node pools, cluster autoscaling, HPA/VPA, ingress, network policies) and registries (ACR).

• Implementing guardrails using Azure Policy, RBAC, PIM, and Blueprints (or equivalent) to enforce least privilege and compliance (e.g., SOC 2, ISO 27001, HIPAA as applicable) will be necessary.

• You will manage secrets and certificates (Key Vault) and integrate security testing (SAST/DAST/Container scanning) into pipelines.

• Supporting vulnerability remediation and adhering to patching SLAs will be part of your responsibilities.

• You will own incident response, including rotating shifts and on-call duties; leading triage, root cause analysis (RCA), and post-incident reviews.

• Your role will involve optimizing cost (FinOps), managing tagging standards, budgets, and proactive spending alerts.

• Maintaining runbooks, knowledge base articles, and automations for routine operations will be essential.

• Acting as a technical mentor; reviewing designs/PRs; and contributing to architectural decisions will be part of your duties.

• You will partner with application teams to onboard workloads, define nonfunctional requirements, and promote platform adoption.

• Managing and participating in the deployment and release of development, testing, and production software builds will be required.

• You will oversee the operations and monitoring of applications and infrastructure from development to production.

• Developing code and addressing break-fix issues that arise will be part of your role.

• Automating infrastructure and application provisioning tasks will be necessary.

• You will ensure that all environments meet scalability and resilience requirements.

• Supporting both customer-facing and internal applications will be expected.

• You will monitor submitted tickets; assign, escalate, and communicate as required.

• Participating in the design of services and software systems will be part of your responsibilities.

• Engaging in rotating on-call support duties will be required.

⛳️ Requirements

• A minimum of six (6) years of hands-on experience with Azure-based infrastructure and services in production environments.

• A Bachelor’s degree in computer science or a related field.

• An additional four (4) years of experience may be accepted in lieu of a degree.

• At least 3+ years of experience supporting enterprise-level applications and their infrastructure.

• Strong knowledge of web technologies and their associated infrastructure (load balancers, DNS, IIS or Apache/WebSphere, authentication and authorization, database connections, etc.).

• Experience with Application Monitoring tools such as Splunk or Dynatrace.

• Working knowledge of automation technologies.

• Familiarity with Agile/Scrum methodologies.

• Deep expertise in several Azure services including AKS, App Services, Functions, APIM, Azure SQL/MI, Cosmos DB, Storage, Event Hub/Service Bus, Redis, VNet/Peering, Private Link, Application Gateway/WAF, Front Door.

• Proficient in IaC with Terraform (preferred) and/or Bicep; experience with Git-based workflows; familiarity with GitHub or Azure DevOps.

• A proven SRE background including SLI/SLO design, error budgets, incident management, RCA, and capacity/performance engineering.

• Experience with CI/CD design and operations (GitHub Actions / Azure DevOps Pipelines); knowledge of artifact/versioning strategies and release governance.

• Competence in observability with Azure tools: Monitor, Log Analytics, Application Insights, and alerting/automations (Action Groups, Logic Apps, Functions).

• Solid understanding of networking fundamentals (DNS, TLS, routing, firewalls, load balancing), identity (AAD/Entra ID), and secrets management (Key Vault).

• Proficiency in scripting languages such as PowerShell and/or Python; understanding of Linux fundamentals.

• Knowledge of security best practices: RBAC, PIM, Azure Policy, and managed identities.

• Capable of effectively communicating with both technical and non-technical teams, fostering cross-functional collaboration and alignment.

• Demonstrates a customer-focused approach and strong relationship management skills.

• Ability to work independently and meet deadlines.

• Strong organizational skills with the capacity to multitask.

• Ability to identify areas for improvement and propose creative solutions.

• Candidates must be U.S. citizens or Green Card holders only, as no sponsorship is available for this position. Candidates must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; approved adjudication of their PUBLIC TRUST must be obtained prior to onboarding with Guidehouse. Preference will be given to candidates with an ACTIVE PUBLIC TRUST or SUITABILITY.

🏝️ Benefits

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Parental Leave

• 401(k) Retirement Plan

• Group Term Life and Travel Assistance

• Voluntary Life and AD&D Insurance

• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts

• Transit and Parking Commuter Benefits

• Short-Term & Long-Term Disability

• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Care.com annual membership

• Employee Assistance Program

• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance, and ID theft protection, etc.)

• This position may be eligible for a discretionary variable incentive bonus.