DevOps Engineer

Established in 2021,Independence Pet Holdings is a corporate holding company that manages a diverse and broad portfolio of modern pet health brands and services, including insurance, pet education, lost recovery services, and more throughout North America.

We believe pet insurance is more than a financial product and build solutions to simplify the pet parenting journey and help improve the well-being of pets. As a leading authority in the pet category, we operate with a full stack of resources, capital, and services to support pet parents. Our multi-brand and omni-channel approach include our own insurance carrier, insurance brands and partner brands.

Role Summary

This role provisions, manages, and supports cloud infrastructure and DevOps capabilities for Clarus DevOps workloads. The Cloud Engineer translates architecture decisions and platform requirements into production-ready Terraform modules and reliable CI/CD pipelines covering compute, storage, PaaS services, environment scaffolding, and deployment automation. The role partners closely with application teams, DevOps leads, networking, security, and operations to deliver governed, reproducible, supportable, and cost-aware infrastructure aligned to Calandra Blueprint and Azure Landing Zone standards.

Key Responsibilities

• Provision Clarus workload-specific Azure resources - compute (VMs, AKS), storage, PaaS services (Container Apps, App Services, Azure Functions, Azure SQL, Cosmos DB), Key Vault, and managed identities per architecture-approved patterns.

• Author and maintain Terraform IaC modules - resource provisioning, testing, peer review, versioning, and CI validation for reusable workload and platform components.

• Build, maintain, and support CI/CD pipelines - Azure DevOps YAML pipelines, reusable templates, build and release stages, approvals, quality gates, and environment-specific deployment flows.

• Troubleshoot pipeline and deployment issues - failed builds, blocked releases, service connection problems, agent pool issues, package or artifact failures, container image deployments, and rollback scenarios.

• Manage secure deployment integrations - Azure service connections, federated credentials, managed-identity authentication, Key Vault-backed secrets, artifact feeds, container registries, and least-privilege access patterns.

• Scaffold and manage workload landing-zone structures - subscriptions, resource groups, RBAC assignments, tagging, Azure Policy, and dev / stg / prd environment alignment within the Calandra Azure Landing Zone.

• Integrate workload resources with shared network services - private endpoints, VNet integration, DNS registration, firewall rule requests, and connectivity validation for Clarus environments.

• Maintain environment parity and operational readiness - governance guardrails, policy compliance, cost tagging, quota management, secure defaults, runbooks, and release support procedures.

• Support DevSecOps controls - pipeline security checks, SAST integration, dependency scanning, infrastructure validation, branch policies, pull request checks, and audit-friendly deployment evidence.

• Monitor resource health, cost, and compliance - contribute to observability dashboards, alerting baselines, incident troubleshooting, and cost optimization recommendations.

Required Qualifications

• 3-5 years in Cloud Engineering or DevOps engineering, with hands-on Azure infrastructure provisioning and operational support experience.

• Proven Terraform skills - authoring, testing, reviewing, and maintaining modules in a team environment with CI validation.

• Strong CI/CD pipeline experience - Azure DevOps, YAML pipeline authoring, reusable templates, approvals, quality gates, and release troubleshooting.

• Working knowledge of Azure resource hierarchy (management groups, subscriptions, resource groups), Azure RBAC, Azure Policy, and tagging standards.

• Hands-on experience with Azure PaaS and workload services: App Service, AKS, Container Apps, Azure Functions, Azure SQL, Cosmos DB, Storage, and Key Vault.

• Experience with secure connectivity patterns - private endpoints, VNet integration, DNS, firewall dependencies, and PaaS workload validation.

• Experience supporting deployment security - service connections, managed identities, service principals, Key Vault integration, branch policies, and least-privilege access.

• Hands-on experience with monitoring and observability platforms including Azure Monitor, Log Analytics, Application Insights, Prometheus, Grafana, Site24x7, or equivalent enterprise monitoring solutions.

• Experience configuring alerts, dashboards, and service health monitoring for cloud infrastructure, applications, CI/CD pipelines, and platform services to support proactive operations.

• Proven incident response and production support experience, including triage, root cause analysis, service restoration, and post-incident documentation in business-critical environments.

• Ability to troubleshoot complex infrastructure and deployment issues across Azure resources, networking, identity services, container platforms, and CI/CD pipelines.

• Clear written communication and the ability to work across application, platform, security, networking, vendor, and operations teams.

Preferred Qualifications

• Experience supporting Azure DevOps platform capabilities - agent pools, variable groups, environments, approvals, artifacts, package feeds, release gates, and pipeline library management.

• Familiarity with GitHub Advanced Security or similar DevSecOps tooling for SAST, dependency scanning, secret scanning, and pull request enforcement.

• Familiarity with Azure Landing Zone / Calandra-style environment patterns (landing-zone accelerators, policy-as-code, subscription vending, and workload governance).

• Azure certifications: AZ-104 (Azure Administrator), AZ-204 (Azure Developer), AZ-400 (DevOps Engineer), or equivalent experience.

• Experience with cloud cost management (Azure Cost Management, FinOps practices) in a multi-subscription environment.

Success in the First 90 Days

• Ramp into Clarus DevOps workloads and existing Cloud and DevOps Engineering standards, module libraries, deployment patterns, and support processes.

• Deliver or improve CI/CD pipelines for at least one Clarus workload, including reusable templates, validation gates, deployment automation, and documented support steps.

• Deliver IaC updates for Clarus workload infrastructure - passing CI gates and peer review - checked into the shared repo with clear deployment guidance.

• Establish a support runbook for common infrastructure and pipeline requests, including build failures, release issues, service connection problems, environment promotion, and rollback coordination.

Compensation:

New York Base pay range: $121,646 - $152,058 per year. This is the range we reasonably expect to pay at hire. Placement within the range depends on job-related factors such as experience, skills, and certifications. This position is not eligible for bonus or incentive pay. Base pay is one part of a total rewards package that includes the benefits listed below.

All of our jobs come with great benefits including healthcare, parental leave and opportunities for career advancements. Some offerings are dependent upon the location of where you work and can include the following:

• Comprehensive full medical, dental and vision Insurance

• Basic Life Insurance at no cost to the employee

• Company paid short-term and long-term disability

• 12 weeks of 100% paid Parental Leave

• Health Savings Account (HSA)

• Flexible Spending Accounts (FSA)

• Retirement savings plan

• Personal Paid Time Off

• Paid holidays and company-wide Wellness Day off

• Paid time off to volunteer at nonprofit organizations

• Pet friendly office environment

• Commuter Benefits

• Group Pet Insurance

• On the job training and skills development

• Employee Assistance Program (EAP)

Interview Technology Notice:

Please note that phone and video interviews or screenings may be recorded and transcribed using interview technology to support our recruitment process.

By continuing with the interview, you consent to this use.

Text Messaging Notice:

If you provide a mobile phone number, you may receive job-related communications via text message. Message and data rates may apply.

You may opt out of text communications at any time by replying “STOP.”