Devops Engineer

Role overview

Key responsibilities

• Maintain AWA Azure infrastructure in Terraform or Bicep, including AKS, ADLS Gen2, APIM, Azure Firewall, private endpoints, Key Vault, Container Registry, and ExpressRoute.
• Design and maintain Azure DevOps pipelines for container builds, ACR pushes, Notary v2 signing, AKS deployment, infrastructure changes, policy checks, and regression testing.
• Manage AKS namespace isolation, network policies, pod disruption budgets, KEDA autoscaling, OPA Gatekeeper admission policies, and workload identity bindings.
• Manage ACR governance, image signing, vulnerability scanning, and approved-image admission controls.
• Own Key Vault access policies, TLS certificate rotation, secret rotation schedules, and secret-access auditing.
• Configure Azure Monitor and Log Analytics queries for SLA breaches, errors, pod crash loops, token budgets, and Kafka consumer lag.
• Maintain PagerDuty escalation paths and implement security controls with the AI Security Engineer.
• Maintain network topology documentation and test disaster-recovery procedures, including regional failover and RTO/RPO validation.

Essential technical experience

• At least 5 years of DevOps or platform engineering experience, including at least 2 years on Azure.
• Production infrastructure-as-code experience with Terraform or Bicep.
• Kubernetes or AKS experience covering namespaces, RBAC, network policies, Helm, and Kustomize.
• Azure DevOps or GitHub Actions experience with multi-stage pipelines, approvals, and environments.
• Experience with Azure Monitor, Log Analytics, and KQL.
• Experience with Docker, ACR, image signing, and admission control.
• Experience with Azure networking, including VNets, private endpoints, NSGs, Azure Firewall, and ExpressRoute.
• Experience with KEDA or equivalent event-driven autoscaling.

Advantageous technical experience

• Azure Key Vault, managed identity, and Kubernetes workload identity experience.
• OPA Gatekeeper or Kyverno policy-enforcement experience.
• Kafka or Azure Event Hubs consumer-group management and lag-monitoring experience.
• ADLS Gen2, WORM immutable storage, and lifecycle-management experience.
• Azure AI Foundry or APIM experience with token quotas, rate limiting, and backend routing.
• Experience with Defender for Cloud, Sentinel, or Notary v2.

Qualifications

• Bachelor's degree in Computer Science, Systems Engineering, or an equivalent qualification.
• Azure Administrator Associate AZ-104 or DevOps Engineer Expert AZ-400 certification is strongly preferred.
• Certified Kubernetes Administrator certification is advantageous.