Role Description
The DevOps and Cloud Engineer supports Tolling modernization by building secure, automated deployment processes and ensuring reliable delivery and update of services. The role standardizes CI/CD, improves availability, and cost efficiency.
Core Responsibilities
-
CI/CD Engineering & Release Automation
-
Design, build, and maintain CI/CD pipelines in Azure DevOps (YAML and Classic) for microservices and APIs.
-
Establish reusable pipeline templates, release standards, and guardrails for compliant, repeatable deployments.
-
Implement secure secrets and key management using Azure Key Vault and managed identities in pipelines.
-
Automate database deployment workflows (e.g., DACPAC/SQLCMD) and integrate migration steps into releases.
-
Enable blue/green or automated rollback strategies to minimize downtime and risk.
-
Environment Consistency & Observability
-
Standardize provisioning and configuration across Dev/QA/Prod environments; codify configuration baselines.
-
Build monitoring dashboards and actionable alerts for pipeline and deployment health (App Insights, pipeline logs).
-
Uphold DevOps best practices tailored to a compliant government environment.
-
Azure Resource Engineering & Governance
-
Implement and maintain Azure services and governance standards (e.g., App Services, Function Apps, API Gateways/API Management, AKS) supporting Tolling workloads.
-
Support identity and access management (e.g., Entra ID SSO and role assignments) following least-privilege principles.
-
Ensure solutions are fault tolerant and highly available; coordinate change requests and rollback procedures.
-
Monitoring, Troubleshooting & Reliability
-
Monitor Azure services and application workloads to ensure uptime and performance; perform diagnostic deep-dives with Azure Monitor and Log Analytics.
-
Triage production incidents, drive timely resolution, and document root cause findings; participate in operational cycles and maintenance readiness checks.
-
Compliance, Data Flows & Cost Awareness
-
Consider PCI or comparable regulatory requirements when evaluating system behavior, logging, and integrations.
-
Understand end-to-end data flows across tolling systems (e.g., roadway data, financial transactions, reporting) and support optimization of integrations.
-
Contribute to cloud cost visibility and optimization recommendations; align operational choices with governance and budget goals.
-
Collaboration & Communication
-
Partner with architects, developers, DBAs, and engineers to align deployments with secure network and identity configurations; communicate clearly with stakeholders.
Qualifications
-
Hands-on experience with Azure DevOps CI/CD (YAML & Classic).
-
Azure application deployment engineering (e.g., App Services, Functions, Containers, APIs).
-
Secure secrets & key management (Azure Key Vault, RBAC, managed identities).
-
SQL deployment automation integrated with CI/CD.
-
Logging & observability (App Insights, pipeline logs, dashboards, alerts).
-
Infrastructure as Code (Terraform, Bicep, or ARM templates).
-
Scripting & automation (PowerShell and/or Python).
-
Experience with Azure administration/engineering in production environments.
Requirements
-
Azure DevOps CI/CD (YAML & Classic) - Required: 4 Years
-
Azure App Services / Functions / APIs / Containers - Required: 3 Years
-
Secure Secrets & Key Management (Key Vault, RBAC, managed identities) - Required: 3 Years
-
SQL Deployment Automation (DACPAC, SQLCMD, CI/CD-integrated DB migrations) - Required: 1 Year
-
Environment Provisioning & Configuration (Dev/QA/Prod standardization) - Required: 3 Years
-
Logging & Observability (App Insights, pipeline logs, dashboards, alerts) - Required: 3 Years
-
Infrastructure as Code (Terraform/Bicep/ARM) - Required: 2 Years
-
Identity & Access (Entra ID), least-privilege IAM - Required: 1 Year
-
AKS / Containerization (Docker, Kubernetes) - Desired: 1 Year
-
Governance & Compliance Automation (Azure Policy, RBAC, pipeline guardrails) - Desired: 1 Year
-
PCI or similar compliance frameworks - Required: 1 Year
-
Cloud Cost Analysis & Optimization - Desired: 1 Year