Cloud Infrastructure & DevOps Engineer

Role Summary

Key Responsibilities

• Administer Citadel Platform and AI Application Landing Zones, including Azure subscriptions, resource groups, networking, identity, RBAC, policies, Key Vault, monitoring, and cost controls.
• Own Terraform-based Infrastructure as Code, including modules, providers, variables, state and backends, workspaces, plan and apply workflows, and drift remediation.
• Operate CI/CD pipelines on GitHub Enterprise Server, including workflows and self-hosted runners, and support Azure DevOps integration where applicable.
• Ensure infrastructure and configuration changes are version-controlled and deployed through approved CI/CD processes rather than manual portal changes.
• Monitor platform health, availability, capacity, security alerts, and integration failures, and support incident triage and root-cause analysis inputs.
• Execute controlled releases, deployment verification, and rollback procedures in line with approved change-management processes.
• Troubleshoot network, identity, API, data-access, and connectivity issues across Azure, GCP, and on-premise dependencies.
• Maintain runbooks, deployment checklists, configuration and environment inventories, and handover documentation, and conduct knowledge transfer.

Must-Have Skills

• At least three years of hands-on Microsoft Azure administration and operations experience.
• Experience supporting and operating enterprise Azure environments.
• Strong hands-on Terraform and Infrastructure as Code experience.
• Experience with GitHub Enterprise Server, GitHub Actions, self-hosted runners, and CI/CD pipelines.
• Strong knowledge of Azure services, subscriptions, resource groups, and landing zones.
• Experience with Azure networking, including VNETs, DNS, routing, load balancers, and firewalls.
• Knowledge of IAM, RBAC, policy management, and secrets management.
• Experience with monitoring, logging, and alerting solutions.
• Scripting skills in PowerShell, Bash, or Python.
• Experience with release execution, deployment support, and rollback activities.
• Strong operational support and troubleshooting experience.

Required Experience and Skills

• Three to ten years of hands-on Azure administration or operations experience in a production environment.
• Knowledge of Azure landing zones, hub-spoke networking, Azure Monitor, Log Analytics, Azure Policy, RBAC, Key Vault, and cloud cost controls.
• Mandatory hands-on Terraform expertise covering module design, state and backend management, plan and apply workflows, and drift remediation.
• Strong GHES, GitHub Actions and workflows, self-hosted runners, and pipeline-driven Terraform deployment experience.
• Experience with release management, rollback planning, monitoring, incident and problem management, and operational documentation.
• Working knowledge of APIM or API gateways, REST APIs, event streaming, and cross-cloud or on-premise connectivity.

Good-to-Have Skills

• Experience with Docker, Kubernetes, or OpenShift.
• Exposure to DevSecOps, security scanning, and policy-as-code.
• Experience with Azure Landing Zones and cloud governance frameworks.
• Knowledge of Azure Monitor, Log Analytics, Prometheus, Grafana, or ELK/OpenSearch.
• Experience with Terraform Cloud or Terraform Enterprise.
• Familiarity with ServiceNow and ITSM processes.
• Experience working in regulated or enterprise environments.
• Knowledge of backup, disaster recovery, and high-availability solutions.

Preferred Certifications

• Microsoft Azure Administrator Associate certification is strongly preferred.
• Azure DevOps Engineer Expert, HashiCorp Terraform Associate, GitHub Actions, Azure Security Engineer Associate, or Identity and Access Administrator certifications are additionally preferred.
• Google Cloud Associate Cloud Engineer certification is an advantage.

Key Deliverables