Senior DevOps Engineer (Azure)

Quick Facts

• Senior DevOps Engineer (Azure)
• Cloud platform modernization: migrate legacy and retained services to a new Azure-based platform (AKS)
• Hands-on work across infrastructure automation, Kubernetes, networking, security, CI/CD, and cloud cost optimization

Description

You will join a modernization project migrating live services and CI/CD pipelines to a standardized, reusable Azure platform built around AKS, Terraform, Helm, and Azure DevOps. The role covers migration, platform changes, troubleshooting, optimization, and operational handover with close collaboration across DevOps and engineering teams.

Responsibilities

• Port legacy and retained services onto new AKS clusters and subscriptions, and move CI/CD pipelines into Azure DevOps using shared pipeline templates
• Extend Terraform across multiple IaC layers (compute, infrastructure, hub, global infrastructure, monitoring)
• Create and maintain Helm charts for individual services
• Implement traffic-routing changes to move internal calls away from Cloudflare (Front Door, WAF, firewall, DNS, origin configuration)
• Decommission obsolete infrastructure safely while managing Terraform state and dependencies
• Right-size and optimize Cosmos DB and Redis (RU/autoscale, tiers, scaling, cost, performance)
• Contribute to security hardening across the platform
• Maintain reliable CI/CD pipelines
• Perform day-to-day platform engineering: provisioning, configuration changes, drift remediation, backlog items, BAU tickets
• Support other teams onboarding services to the platform
• Produce runbooks and handover documentation for SRE operations

Requirements

• Strong Terraform experience: modules, workspaces, remote azurerm state, multi-environment/multi-region tfvars
• Hands-on Azure experience with hub-and-spoke landing zones, AKS, Front Door, Application Gateway + WAF, Azure Firewall, APIM, VNets, Private Endpoints, Key Vault, Managed/Workload Identity, RBAC
• Experience with Kubernetes and Helm: authoring Helm charts; working with deployments/services/ingress; workload identity; resource requests/limits; scaling; troubleshooting
• Networking and security expertise: Front Door and WAF policies, firewall rule design, DNS, origins and routing, TLS; experience migrating traffic from Cloudflare to Azure-native edge services
• Strong Azure DevOps Pipelines experience, including thin pipelines and integrating security scanning into CI/CD
• Cost and scaling expertise: right-sizing Cosmos DB (RU/autoscale) and Redis (tiers, clustering)
• Proven migration experience for live services with minimal downtime, including cutover and rollback procedures
• Strong Git trunk/PR workflow, IaC code reviews, and clear technical documentation; ability to work independently in a senior contract capacity
• English B2 or higher

Benefits

• Private medical care
• Multisport card
• Life insurance