Lead DevOps Engineer

Job description

We are seeking a Lead DevOps Engineer to lead Azure platform automation across Azure infrastructure, AKS, identity, and golden-image pipelines in our Software, System, and Test Engineering group. You will drive CI/CD-based delivery and reliability for our IaC engine and partner with architects to standardize and scale.

Responsibilities

- Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres based on Azure Architect designs

- Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster and node-pool provisioning and namespace onboarding

- Configure AKS add-ons including ingress, cert-manager, external-dns, monitoring, and policy

- Implement identity wiring for Azure workloads using managed identities and SPN or app registrations

- Integrate secrets management using Azure Key Vault and OpenBao for Azure workloads

- Build and maintain Image Factory pipelines for VM and container golden images across Linux and Windows baselines

- Execute Ansible playbooks for VM post-provisioning and golden-image handoff

- Support Backstage golden-path templates for Azure provisioning and validate generated infrastructure end-to-end

- Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption

- Contribute to module testing, drift detection, and documentation aligned with the Infrastructure as Code Engine standards

Requirements

- 5+ years of experience building and operating Microsoft Azure infrastructure via Terraform/OpenTofu with CI/CD using Azure DevOps

- Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management

- Leadership experience guiding Infrastructure as Code standards, reviews, and delivery across teams

- Project delivery experience troubleshooting and remediating production issues across Azure automation during Implementation and Adoption

- Strong Terraform/OpenTofu skills for modular infrastructure design, testing, and drift detection

- Strong Ansible skills for Configuration as Code, VM post-provisioning, and golden-image pipeline integration

- Solid Azure networking knowledge including VNets, private endpoints, and NSGs for integration with a network foundation

- Strong Azure identity knowledge including managed identities, SPN/app registrations, and secrets integration with Azure Key Vault and OpenBao

- Effective collaboration skills to partner with Azure and Network Architects and support Backstage golden-path adoption

- English proficiency at B2 level or higher

Nice to have

- Experience with Azure VMware Solution (AVS) private cloud provisioning

- Familiarity with image hardening and scanning tooling

- Experience publishing images using Azure Shared Image Gallery