Cloud Infrastructure & DevOps Engineer

Role summary

Key responsibilities

• Administer Azure subscriptions, resource groups, networking, identity, RBAC, policies, Key Vault, monitoring, and cost controls for platform landing zones.
• Maintain Terraform modules, providers, variables, state or backends, workspaces, plan and apply workflows, and drift remediation.
• Operate CI/CD pipelines on GitHub Enterprise Server, including workflows and self-hosted runners.
• Ensure infrastructure and configuration changes are version-controlled and deployed through approved CI/CD processes.
• Monitor platform health, availability, capacity, security alerts, and integration failures.
• Support incident triage, root-cause-analysis inputs, and recurring problem tracking.
• Execute controlled releases, deployment verification, and rollback procedures under change-management processes.
• Troubleshoot network, identity, API, data-access, and connectivity issues across Azure, GCP, and on-premise dependencies.
• Maintain runbooks, deployment checklists, configuration inventories, environment inventories, and handover documentation.
• Conduct knowledge transfer and prepare operational handover materials.

Required experience and skills

• At least 3 years of hands-on Microsoft Azure administration and operations experience.
• Experience supporting and operating enterprise Azure environments in production.
• Strong hands-on Terraform and Infrastructure as Code experience, including modules, state or backends, plan and apply workflows, and drift remediation.
• Experience with GitHub Enterprise Server, GitHub Actions or workflows, self-hosted runners, and pipeline-driven Terraform deployment.
• Strong knowledge of Azure Landing Zones, hub-spoke networking, Azure Monitor, Log Analytics, Azure Policy, RBAC, Key Vault, and cloud cost controls.
• Experience with Azure networking, including VNETs, DNS, routing, load balancers, and firewalls.
• Experience with release management, rollback planning, monitoring, incident and problem management, and operational documentation.
• Working knowledge of APIM or API gateways, REST APIs, event streaming, and cross-cloud or on-premise connectivity.
• Scripting skills in PowerShell, Bash, or Python.

Preferred qualifications

• Experience with Docker, Kubernetes, or OpenShift is good to have.
• Exposure to DevSecOps, security scanning, and policy-as-code is good to have.
• Experience with Azure Landing Zones and cloud governance frameworks is preferred.
• Knowledge of Azure Monitor, Log Analytics, Prometheus, Grafana, or ELK/OpenSearch is preferred.
• Experience with Terraform Cloud or Enterprise is preferred.
• Familiarity with ServiceNow and ITSM processes is preferred.
• Experience in regulated or enterprise environments is preferred.
• Knowledge of backup, disaster recovery, and high-availability solutions is preferred.

Preferred certifications

• Microsoft Azure Administrator Associate certification is strongly preferred.
• Azure DevOps Engineer Expert, HashiCorp Terraform Associate, GitHub Actions, Azure Security Engineer Associate, Identity and Access Administrator, and Google Cloud Associate Cloud Engineer certifications are preferred or advantageous.

Key deliverables