Lead DevOps Engineer

Job description

We're looking for a skilled Lead DevOps Engineer to guide the development and delivery of a Unified Automation Platform. This person will drive technical strategy for the Backstage developer portal, infrastructure automation, cloud provisioning (Azure & VMware), security integration, and observability. The ideal candidate blends great technical skills with leadership abilities to advance Platform Engineering and enterprise-scale self-service automation.

Responsibilities

- Support the design and build-out of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)

- Build multi-tenancy structures with org hierarchy and detailed RBAC that go beyond basic authentication

- Connect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications

- Create golden path templates and self-service workflows for development teams

- Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible

- Set up GitOps workflows to manage continuous deployment and drift

- Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)

- Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards

- Develop and maintain image factory pipelines for VM and container golden images

Requirements

- Over 5 years of DevOps engineering experience, with strong skills in Terraform/OpenTofu and Ansible

- At least 1 year of leadership experience

- Solid understanding of Azure networking and security services, such as VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables

- Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps

- Strong knowledge of Azure databases, such as Azure SQL, Cosmos DB, and Azure Postgres

- Deep expertise in Kubernetes/AKS provisioning, cluster management, ops dashboards, and Docker

- Proven skills in Azure DevOps (ADO) pipeline automation and integration

- English proficiency at B2 level or above

Nice to have

- Experience with Backstage, including developer portals, plugins, Scaffolder, TechDocs, Software Catalog, and Search, plus self-service platform design and multi-tenancy/RBAC models

- Familiarity with GitOps tools like ArgoCD or Flux, along with continuous deployment and drift management

- Background in Identity & Access Management, covering Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, and RBAC

- Knowledge of Secrets Management tools such as Azure Key Vault, OpenBao/HashiCorp Vault, and dynamic secrets

- Scripting and automation skills in Python, Bash, PowerShell, and REST API integration

- Understanding of networking tools, including DNS automation and IPAM (NetBox)

- Awareness of observability practices, such as monitoring, metrics, logging, and basic tooling

- Experience with VMware virtualization, including vSphere, vSAN, NSX-T, SRM, and DRS

- Exposure to Azure VMware Solution (AVS) for hybrid/on-prem workload management

- Expertise in Image Factory pipelines for VM and container golden images

- Knowledge of Certificate Management tools like Venafi

- Experience implementing Policy as Code using OPA or similar policy engines

- Familiarity with Privileged Access Management (PAM), including break-the-glass integration

- Understanding of DevSecOps tooling, such as SAST, DAST, SCA, IAST, and ASPM integration

- Experience with Security Alerting through SIEM and WAF integrations

- Knowledge of firewall platforms like PaloAlto, F5, and Cloudflare

- Familiarity with ITSM/CMDB integration, including component request workflows and artifact repositories

- Experience with Vulnerability Management dashboards and reporting

- Skills in Documentation Automation, including generating Solution Design Documents (SDD)