Role Description
We are looking for a DevOps Engineer to build and run Azure platforms on a hub-and-spoke network design, with AKS and container workloads. You will work alongside a platform lead and product development teams, from infrastructure as code to application delivery.
The applications you will support are primarily built with PHP and React. You do not need to write application code, but experience building, containerizing, and deploying PHP and Node.js/React applications is a strong plus.
-
Build and maintain Azure infrastructure as code using Terraform.
-
Build and operate hub-and-spoke networks with secure, private connectivity between services.
-
Run AKS clusters and containerized workloads in production.
-
Build and maintain CI/CD pipelines in GitHub Actions and Azure DevOps.
-
Deliver applications to Kubernetes using GitOps workflows.
-
Configure edge routing, ingress, and security: DNS, TLS certificates, and basic WAF/gateway setups.
-
Set up monitoring, centralized logging, and proactive alerting.
-
Implement identity and security baselines: Managed Identities, Azure RBAC, secrets management, and policies.
-
Collaborate on architectural discussions: review technical proposals, surface operational risks, and contribute to runbooks and design records.
-
Support development teams day to day: local development workflows, Dockerfiles, and debugging in shared environments.
Qualifications
-
3+ years in DevOps or platform engineering, with at least 2 years supporting Azure in production.
-
Strong understanding of Azure resource hierarchy: Management Groups, Subscriptions, Resource Groups, and naming/tagging conventions.
-
Identity & access management: Microsoft Entra ID, Azure RBAC, and Managed Identities.
-
Hands-on experience with core resources: Storage Accounts (Blob/Files), Key Vault, Azure Container Registry (ACR), and Log Analytics.
-
Professional working proficiency in English (Upper-Intermediate or above).
Requirements
-
Terraform: writing modular code, managing remote state, handling multiple environments, and understanding state locking.
-
Scripting & OS fundamentals: Linux, Bash, and PowerShell.
-
Version control with Git.
-
Containers: building, optimizing, and debugging Dockerfiles; local setups using Docker Compose.
-
AKS in Production: cluster provisioning, node pools, autoscaling, ingress controllers, and upgrades.
-
Kubernetes Operations: core workload manifests (Deployments, Services, ConfigMaps, Secrets), Helm chart usage, and troubleshooting via kubectl.
-
Hub-and-spoke topology: VNet peering, subnet design, and IP address planning (CIDR).
-
Private access for PaaS: hands-on experience securing services via Private Endpoints, Private Link, and Azure Private DNS Zones.
-
Network boundaries: Network Security Groups (NSGs) and NAT Gateways.
-
Secure administrative access: Azure Bastion and VPN Gateway (Site-to-Site / Point-to-Site).
-
Pipelines: hands-on delivery pipelines using either GitHub Actions or Azure DevOps Pipelines (building images, running tests, pushing artifacts, executing Terraform).
-
Observability: Azure Monitor, Log Analytics workspace queries (KQL basics), Application Insights, and alert configuration.
Benefits
-
Full-time, long-term commitment.
-
Working hours in the European time zone.
-
Start date: ASAP.
Interview Steps
-
GT interview with Recruiter
-
Technical interview with GT
-
Cultural Fit & Experience interview with the Client
-
Final interview with the Client
-
Offer