Devops Architect

 

Description:

DevOps Architect

Contract

Job Description:

15+ years profile only

Looking for lead and architecture experience.MS Azure focussedIaaC / Terraforms

"Looking for lead and architecture experience.MS Azure focussedIaaC / Terraforms

Required Knowledge & Experience

Bachelor’s degree in Computer Science or a related field, or equivalent practical experience.

10+ years in Cloud Engineering, Platform Engineering, DevOps, SRE, or Infrastructure Engineering.

5+ years of hands-on experience with Microsoft Azure cloud services and architecture.

5+ years building Infrastructure as Code, with strong hands-on Terraform experience.

Strong experience automating infrastructure with Ansible and scripting in Python, PowerShell, and/or Bash.

Hands-on experience with Kubernetes (ideally AKS) and Helm.

Experience with CI/CD pipelines and GitOps practices (Azure DevOps, GitHub, GitHub Actions).

Solid understanding of cloud networking, security, identity, and governance.

Experience with Windows and Linux operating system configuration, automation, and management

Experience with patch orchestration and vulnerability remediation.

Excellent written and verbal communication, technical analysis, and problem-solving skills.

Ability to learn new technologies quickly and work effectively in a collaborative, agile team.

What You’ll Do

Cloud & Platform Engineering

Design, build, and operate shared cloud platform services on Microsoft Azure that product teams consume for provisioning, deployment, and day-to-day operations.

Develop reusable platform capabilities, modules, templates, and pipelines — that accelerate secure, self-service cloud adoption.

Design and manage enterprise cloud networking and connectivity, including hub-and-spoke topologies, next-generation firewalls, DNS, VPN, peering, and secure administrative access.

Build and operate Azure Kubernetes Service (AKS) clusters and Helm-based application delivery for shared platform and product workloads.

Provision and manage Azure PaaS and data services, including Key Vault, Storage, Azure SQL and MySQL, Cosmos DB, Redis, and Event Hub, with private, secure connectivity.

Manage secure ingress and content delivery services, including Application Gateway/WAF, Azure Front Door, API Management, and CDN.

Maintain golden VM images and hardened infrastructure baselines.

Infrastructure as Code & Automation

Build and maintain Terraform-based provisioning frameworks and shared modules.

Develop automation with Ansible, Python, PowerShell, Bash, and cloud-native APIs.

Create and maintain CI/CD pipelines using GitOps practices, and help modernize tooling (including migrating pipelines from Azure DevOps to GitHub).

Drive modernization through an automation-first approach that reduces manual operations.

Security, Governance & Compliance

Design and manage identity and access using Microsoft Entra ID, including role-based access control, Privileged Identity Management (PIM), Conditional Access, and phishing-resistant MFA.

Own certificate and PKI services, including internal/private certificate authorities, cert-manager, certificate issuance, rotation, and trust distribution, and Azure Key Vault.

Translate security and compliance requirements into cloud-native guardrails and standards, and support audit and compliance programs such as PCI DSS and FedRAMP.

Harden Windows and Linux baselines to CIS/STIG benchmarks and remediate vulnerability and penetration-test findings.

Improve cloud security posture using tooling such as Cloud Security Posture Management (CSPM) and continuous compliance monitoring, partnering with Security and Architecture teams on least-privilege, audit-ready access models.

Reliability & Operations

Operate and support business-critical cloud platform services and participate in an on-call rotation.

Implement robust observability, monitoring, logging, alerting, and dashboard, across the platform.

Lead incident response, root-cause analysis, and remediation, and drive reliability and performance improvements.

Own patch orchestration and vulnerability remediation across Windows and Linux fleets.

Support release and change management, including outage-less deployment patterns such as blue/green and rolling deployments.

Partner with FinOps to identify and implement cloud cost-optimization opportunities.

Technical Leadership

Act as a subject-matter expert for Azure cloud and platform engineering.

Provide code reviews and quality assurance on team members’ automation and infrastructure work.

Mentor engineers and contribute to engineering standards and best practices.

Participate in agile ceremonies and contribute stories and defects to the team’s backlog.

Explore and apply AI-assisted and agentic tooling to streamline cloud operations, troubleshooting, and documentation.