DevOps Engineer

We’re looking for a Senior DevOps Engineer who lives and breathes build and release management. You’ll own the path from commit to production for our .NET services running on Azure Kubernetes Service - designing pipelines that make trunk-based development safe, fast, and boring. This is a hands-on role for someone who believes deployments should be a non-event that happens many times a day.

Our build and release footprint spans both Azure DevOps and GitHub Actions, and you’ll be the person who makes both ecosystems work well - consolidating where it makes sense, and keeping both healthy where it doesn’t.

This is an in-office role based in Dallas. We work side by side with the development teams we support, and that proximity is a big part of how we move fast - pipeline problems get solved at someone’s desk, not in a ticket queue.

What You’ll Do

• Own the design, implementation, and continuous improvement of CI/CD pipelines in Azure DevOps and GitHub Actions for .NET applications and services
• Drive trunk-based development practices: short-lived branches, fast and reliable PR validation, feature flags, and continuous integration into main
• Build and maintain progressive delivery patterns - blue/green, canary, and ring-based rollouts into AKS - with automated rollback on failed health gates
• Define and enforce release standards: versioning and tagging strategy, artifact promotion across environments, release notes automation, and change tracking
• Reduce build times and flaky test noise; treat pipeline reliability and developer feedback loops as first-class products with measurable SLOs
• Manage container build and image lifecycle (Docker, Azure Container Registry) including base image hygiene, caching strategy, and multi-stage build optimization
• Author and maintain infrastructure as code - Bicep and/or Terraform, Helm charts, and Kustomize overlays - so that environments are reproducible and drift is visible
• Embed security into the delivery pipeline: SAST/DAST, dependency and container scanning, SBOM generation, artifact signing and provenance, and policy-as-code gates
• Manage secrets and identity properly - Azure Key Vault, workload identity, OIDC federation for pipeline auth, and elimination of long-lived credentials
• Build observability into releases: deployment health signals, DORA metrics (lead time, deployment frequency, change failure rate, MTTR), and dashboards/alerting via Azure Monitor, Application Insights, Prometheus, or Grafana
• Partner directly with development teams - unblock them, review their pipeline changes, and raise the bar on delivery practices through coaching rather than gatekeeping
• Participate in on-call rotation and incident response for platform and delivery systems; lead blameless postmortems and drive the follow-through

What You Bring

Required

• 5+ years in DevOps, platform, or release engineering, with significant time owning build and release systems
• Deep, practical experience with Azure DevOps Pipelines and GitHub Actions - YAML pipelines, templates, reusable workflows, self-hosted runners/agents, environments, and approval gates
• Strong Azure experience: AKS, Container Registry, Key Vault, Entra ID / managed identity, networking fundamentals, and resource governance
• Production Kubernetes experience - deployments, services, ingress, autoscaling, resource tuning, and real-world troubleshooting under pressure
• Solid understanding of the .NET build and packaging ecosystem: MSBuild, dotnet CLI, NuGet feeds and versioning, and multi-service solution builds
• Demonstrated success with trunk-based development in a fast-moving environment - you can speak concretely about branching policy, merge queues, feature flags, and keeping main releasable at all times
• Infrastructure as code proficiency with Bicep, ARM, or Terraform, plus Helm for Kubernetes packaging
• Scripting and automation in PowerShell, Bash, and/or Python; comfortable writing tooling, not just configuring it
• Working knowledge of supply chain security practices and secure secrets handling in CI/CD
• Clear written and verbal communication - you document decisions and can explain tradeoffs to engineers and leadership alike

Nice to Have

• Experience consolidating or migrating between Azure DevOps and GitHub (or running both at scale)
• GitOps tooling - Argo CD or Flux
• Service mesh (Istio, Linkerd) or advanced AKS networking
• Policy-as-code with OPA/Gatekeeper or Azure Policy
• Experience in a regulated or audited environment (SOC 2, PCI, HIPAA) - building controls that satisfy auditors without slowing teams down
• Database deployment automation (EF Core migrations, DACPAC, Flyway/Liquibase)
• Performance and load testing integrated into the release pipeline
• Azure certifications (AZ-400, AZ-104) or CKA/CKAD

How We Work

Trunk-based, small batches, deploy often. We prefer automation over process documents, measured improvement over opinion, and shared ownership over handoffs. If you’ve been the person quietly making everyone else’s deployments faster and less scary, you’ll fit here.

At Tieto, we believe in the power of diversity, equity, and inclusion. We encourage applicants of all backgrounds, genders (m/f/d), and walks of life to join our team, as we believe that this fosters an inspiring workplace and fuels innovation. Our commitment to openness, trust, and diversity is at the heart of our mission to create digital futures that benefit businesses, societies, and humanity.

Diversity, equity and inclusion | Sustainability | Tieto

Stay alert to recruitment scams:

• Tieto only communicates via @tieto.com email addresses.
• We never ask candidates to pay fees or share financial details during recruitment.
• If you receive a suspicious message claiming to be from Tieto, don't respond - verify it via our official careers site.
• For more information visit Important Advisory Regarding Recruitment Fraud | Tieto Blog