Role Description
We are seeking a Lead DevOps Engineer to lead Azure platform automation across Azure infrastructure, AKS, identity, and golden-image pipelines in our Software, System, and Test Engineering group. You will drive CI/CD-based delivery and reliability for our IaC engine and partner with architects to standardize and scale.
-
Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres based on Azure Architect designs.
-
Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster and node-pool provisioning and namespace onboarding.
-
Configure AKS add-ons including ingress, cert-manager, external-dns, monitoring, and policy.
-
Implement identity wiring for Azure workloads using managed identities and SPN or app registrations.
-
Integrate secrets management using Azure Key Vault and OpenBao for Azure workloads.
-
Build and maintain Image Factory pipelines for VM and container golden images across Linux and Windows baselines.
-
Execute Ansible playbooks for VM post-provisioning and golden-image handoff.
-
Support Backstage golden-path templates for Azure provisioning and validate generated infrastructure end-to-end.
-
Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption.
-
Contribute to module testing, drift detection, and documentation aligned with the Infrastructure as Code Engine standards.
Qualifications
-
5+ years of experience building and operating Microsoft Azure infrastructure via Terraform/OpenTofu with CI/CD using Azure DevOps.
-
Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management.
-
Leadership experience guiding Infrastructure as Code standards, reviews, and delivery across teams.
-
Project delivery experience troubleshooting and remediating production issues across Azure automation during Implementation and Adoption.
-
Strong Terraform/OpenTofu skills for modular infrastructure design, testing, and drift detection.
-
Strong Ansible skills for Configuration as Code, VM post-provisioning, and golden-image pipeline integration.
-
Solid Azure networking knowledge including VNets, private endpoints, and NSGs for integration with a network foundation.
-
Strong Azure identity knowledge including managed identities, SPN/app registrations, and secrets integration with Azure Key Vault and OpenBao.
-
Effective collaboration skills to partner with Azure and Network Architects and support Backstage golden-path adoption.
-
English proficiency at B2 level or higher.
Requirements
-
Experience with Azure VMware Solution (AVS) private cloud provisioning.
-
Familiarity with image hardening and scanning tooling.
-
Experience publishing images using Azure Shared Image Gallery.