DevOps Enginer

We're looking for a DevOps Engineer to own and operate our multi-environment Azure infrastructure, spanning development, QA, staging, production, and an active cross-region disaster-recovery environment. This is a hands-on role for someone who treats production infrastructure with both confidence and caution, moving fluidly between the Azure Portal, CLI tooling, and Kubernetes manifests to resolve issues end to end.

The candidate will have responsibilities across the following functions:

Kubernetes (AKS):

• Manage AKS clusters across all environments.
• Maintain Kustomize-based deployment overlays.
• Manage ConfigMaps and Secrets via the Key Vault CSI driver.
• Handle resource sizing and troubleshoot live rollouts.

CI/CD:

• Design, maintain, and troubleshoot GitHub Actions pipelines.
• Build, tag, and promote container images consistently across environments.
• Manage service principal credentials and pipeline RBAC.
• Own container registries and environment-specific configuration promotion strategies.

Infrastructure as Code:

• Manage Azure resources with Terraform alongside Kubernetes manifests.

Troubleshooting and Collaboration:

• Root-cause complex issues that span networking, gateway configuration, identity and authentication, Kubernetes config, and application code, often with no single obvious culprit.
• Work closely with backend and frontend developers, translating infrastructure findings into clear, actionable guidance for application-level fixes.
• Document findings clearly.

Disaster Recovery:

• Support and validate DR architecture, including Cosmos DB for MongoDB read-replica failover.
• Validate cross-region routing through Front Door and Application Gateway.

Security and Compliance:

• Perform secret rotation and maintain credential hygiene.
• Lead incident response when credentials are accidentally exposed.
• Apply least-privilege access throughout.
• Work with resources under formal data-retention locks and compliance sign-off requirements.
• Uphold audit logging, access control, and change-management discipline in a SOC 2-audited environment.

Requirements:

• 5-6 years of hands-on DevOps experience.
• Deep working knowledge of Azure, including: API Management (CORS and RBAC policies), Azure AD B2C tenant configuration and app registrations, Key Vault, Azure Firewall FQDN-based egress rules, Front Door and Application Gateway.
• Strong experience with AKS and Kustomize/Helm.
• Experience with GitHub Actions CI/CD pipelines.
• Familiarity with Terraform.
• SOC 2 compliance knowledge.
• Experience with container registries and configuration promotion strategies.
• Strong troubleshooting instincts across the full stack.
• Ability to work independently through ambiguous, multi-layered production problems.
• Sound judgment on when to pause and confirm before taking irreversible or production-impacting action.
• Exposure to Azure Blob Storage and Redis caching in a microservices architecture.

Skills

AKS, Azure, Kubernetes, Terraform