Senior DevOps Engineer – Azure

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, construct, and uphold production Azure infrastructure, encompassing subscriptions, landing zones, private networking, managed identities, Azure Key Vault, and Azure Monitor.

• Develop and sustain infrastructure as code utilizing Terraform or Bicep, which includes reusable modules and automated provisioning.

• Establish initial build and development environments while ensuring secure production-ready infrastructure within the client’s Azure tenant.

• Design and execute isolated customer deployments with distinct subscriptions, networking, encryption keys, and data stores.

• Create repeatable infrastructure deployment procedures for consistent and efficient provisioning of customer environments.

• Implement secure identity and access management using Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time access, and break-glass protocols.

• Design and manage secure CI/CD pipelines incorporating automated testing, security scanning, approval workflows, and regulated production releases.

• Establish cloud security controls and assist with security assessments, penetration testing, compliance reviews, and vulnerability remediation.

• Develop observability features including centralized logging, metrics, distributed tracing, alerting, and integration with enterprise SIEM.

• Design and implement resilient infrastructure, including backup strategies, zone redundancy, and disaster recovery solutions with secondary-region failover.

• Define recovery objectives, execute disaster recovery and performance testing, and document outcomes along with remediation actions.

• Collaborate with application engineers, security teams, enterprise architects, and client stakeholders.

• Create operational runbooks, infrastructure documentation, and incident response protocols.

• Engage in production on-call rotations, incident resolution, and post-deployment hypercare.

• Own the infrastructure throughout its lifecycle from architecture and implementation to deployment, monitoring, troubleshooting, and ongoing enhancement.

• For Platform Lead: provide guidance on technical architecture, establish platform engineering standards, coordinate engineering activities, and represent the team in client architecture and security discussions.

⛳️ Requirements

• Extensive experience in senior Azure platform engineering, including the design, construction, and management of production Azure environments end to end.

• Strong practical experience with Terraform or Bicep, encompassing reusable infrastructure modules, automated provisioning, configuration management, and lifecycle ownership.

• Experience in building production platforms that handle PHI or similarly sensitive data, along with supporting HIPAA, SOC 2, or equivalent enterprise security evaluations.

• Familiarity with penetration testing, security remediation, and providing technical compliance evidence.

• In-depth experience with Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time and break-glass access, credential rotation, and secure secrets management.

• Experience in designing and operating customer-isolated, multi-tenant environments.

• Proven experience in constructing secure CI/CD pipelines within enterprise-controlled settings.

• Hands-on experience with backup strategies, zone-redundant infrastructure, secondary-region recovery environments, and documented RTO/RPO objectives.

• Experience in executing and validating production disaster recovery or failover tests.

• Strong proficiency in logging, metrics, tracing, alerting, security event monitoring, and performance testing.

• Ability to troubleshoot production issues and participate in on-call support.

• Capability to independently manage complex infrastructure initiatives and articulate architectural decisions.

• Strong proficiency in written and spoken English; comfortable collaborating with US-based engineers, architects, security teams, and client stakeholders.

• Must reside in the United States and possess authorization to work in the US.

• Availability around December 1, 2026.

• For Platform Lead: prior experience in leading a small platform engineering team, establishing technical standards, owning architectural decisions, and representing infrastructure designs in enterprise client discussions.

🏝️ Benefits

• Potential for contract extension.

• Multi-month engagement.

• Occasional domestic travel may be required.