Sr. DevOps Engineer

Compute (PaaS and serverless): Deep hands-on experience with Azure Web Apps / App Service, Azure Function Apps, and Azure Container Apps — deployment slots, scaling rules, VNet integration, and configuration management.

Networking and edge: Application Gateway and WAF — rewrite rules, path-based routing, listeners, backend pools, health probes, custom WAF rules and exclusions, and TLS/certificate management. Traffic Manager profiles and routing methods.

Cloud networking: VNets, subnets, NSGs, route tables, hub-and-spoke architecture, Private Endpoints, and Private DNS.

Messaging and integration: Azure Service Bus — namespaces, queues, topics, subscriptions, subscription filters and rules, and shared access policies and permissions.

API Management: APIM configuration and policy authoring (inbound, outbound, backend, and on-error), products and subscriptions, named values, versioning and revisions, and managing APIM changes through code and pipelines rather than the portal.

Identity and access: Entra ID — app registrations, API permissions and consent, service principals and managed identities, OAuth 2.0 and OIDC flows, token and claims configuration, and Azure RBAC design and assignment.

B2C and SSO: Azure AD B2C user flows and custom policies, including hands-on work with SSO XML policy files (Identity Experience Framework), and SAML/OIDC federation with external identity providers.

Supporting services: Storage Accounts, Key Vault, Azure Cache for Redis, and Azure Monitor / Log Analytics / Application Insights.

Terraform — full working command, not just familiarity: authoring reusable modules, managing remote state and workspaces, provider and version pinning, plan/apply review discipline, import and drift remediation, and using Terraform as the single path for all resource changes — including APIM configuration and policy and Service Bus topology and access policies.

Strong CI/CD experience with Azure DevOps — YAML pipelines (and comfort with classic pipelines), multi-stage deployments, environments, approvals, service connections, and variable/secret management.

Strong scripting skills in PowerShell and/or Bash; fluent with Azure CLI.

Solid Git and source-control practice — branching strategy, pull requests, and code review.

Proven success managing and optimizing infrastructure and CI/CD for an Azure-based SaaS product at scale.

Strong understanding of security principles — least privilege, secrets management, network isolation, certificate lifecycle, and compliance-driven controls.

Working knowledge of databases, both SQL and NoSQL.

Excellent communication and collaboration skills, with the ability to work across multiple disciplines and explain platform decisions to engineers who are not infrastructure specialists.

Strong analytical skills and a track record of driving measurable reliability improvements.

Experience working in an agile SDLC in a fast-paced environment with high demand and high standards.

Ability to assimilate information quickly under pressure, and strong planning skills to ensure projects are delivered on time.

Bachelor's degree in Computer Science or a similar field, or equivalent practical experience.

Hands-on Azure AI Foundry, Azure OpenAI, or comparable managed AI platform deployment experience.

Databricks administration and deployment automation — Unity Catalog, Databricks Asset Bundles, or the Databricks Terraform provider.

Experience supporting MLOps or data engineering teams, including model deployment, guardrails, and content safety.

Azure Data Factory or comparable data orchestration tooling.

Authoring or heavily customizing B2C custom policy XML from scratch.

Containers and Docker for microservice or service-oriented architectures. Note: we do not use Kubernetes, and Kubernetes experience is not required for this role.

Monitoring and security tooling such as New Relic, Rapid7, Azure Monitor workbooks, or similar.

Relevant Azure certifications (AZ-104, AZ-400, AZ-500, or similar).

Familiarity with C#, Java, Python, or JavaScript/React — enough to read application code and debug deployment and configuration issues alongside product teams.

Sphera is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all colleagues.

This job description is intended to convey information essential to understanding the scope of the job and the general nature and level of work performed by job holders within this job. This job description is not intended to be an exhaustive list of qualifications, skills, efforts, duties, responsibilities or working conditions associated with the position.