Senior DevOps Engineer – Azure

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Take ownership and enhance the Azure-based API Platform that supports the company's compounding operations.

• Manage private AKS clusters and implement admission controllers effectively.

• Ensure image signing and scanning are integrated within the CI/CD pipelines.

• Create deployment strategies such as blue-green and canary rollouts, incorporating pre-deploy security gates.

• Oversee cost optimization across all environments.

• Maintain documented wake-up processes with clearly defined SLAs.

• Manage monitoring and observability tools.

• Facilitate cross-functional discussions (involving security, developers, CTO) regarding phased rollouts across subscriptions, providing cost data, risk context, and a comprehensive infrastructure plan to ensure alignment.

• Address problems strategically instead of merely executing tasks.

⛳️ Requirements

• A minimum of 6 years in DevOps / SRE / Cloud / Platform / Infrastructure Engineering.

• Between 3 to 5 years of practical experience with Azure infrastructure, particularly with AKS.

• In-depth experience with Azure Landing Zone concepts: hub-spoke, segmentation, governance, RBAC, Azure Policy, tagging, and private connectivity.

• Proven skills with Bicep and PR-based IaC workflows (including validation/linting/scanning, controlled change, and drift awareness).

• Extensive knowledge of Azure networking components: VNets, NSGs, UDRs/route tables, Private Endpoints/DNS, Load Balancers, NAT Gateway, and secure outbound patterns.

• Hands-on experience operating AKS in production, including private clusters, upgrades, ingress, Helm, autoscaling, and troubleshooting using kubectl (logs/events/probes/DNS/network).

• Familiarity with APIM / App Gateway / Front Door / WAF and API security patterns (such as TLS, OAuth2/OIDC, JWT validation, throttling/rate limiting, IP filtering).

• Experience with Azure DevOps YAML pipelines across various environments, including approvals/gates and rollback strategies.

• Strong understanding of security fundamentals: Entra ID RBAC, managed identities/workload identity, Key Vault, secret rotation, and certificate lifecycle management.

• Proficient in Azure CLI, PowerShell, and/or Python for automation and operational tooling.

🏝️ Benefits

• 20+ Paid time off days