Senior Azure Cloud DevSecOps Engineer

Senior Azure Cloud DevSecOps Engineer

Total Experience: 8+ years

Relevant Experience: 5+ years (minimum 2 years in lead / architect capacity)

Primary Platform: Microsoft Azure

Engagement Type: Enterprise production, multi-region, regulated cloud environments

Required Certification: AZ-400 DevOps Engineer Expert (minimum for senior role)

ABOUT THE ROLE & ORGANISATION

We are building a secure, scalable Azure platform that supports critical enterprise operations and enables faster, more reliable delivery.

The DevOps team owns infrastructure lifecycle, CI/CD, Kubernetes, observability, and platform reliability in close partnership with engineering, security, and operations teams.

ROLE OVERVIEW

The Senior Azure Cloud DevSecOps Engineer leads the design and improvement of secure, scalable, highly available Azure infrastructure.

This role combines platform engineering, automation, CI/CD, observability, DevSecOps, and technical leadership in regulated enterprise environments.

KEY SKILLS & TECHNOLOGY STACK

KEY RESPONSIBILITIES

Cloud Architecture & Platform Ownership

• Own Azure cloud and DevOps architecture, standards, and reusable reference patterns.
• Design and maintain Terraform modules for production-grade, multi-region infrastructure with clear environment separation.
• Govern core Azure services including AKS, API Management, Application Gateway, Front Door, networking, Key Vault, Service Bus, and Event Hub.
• Optimize cost, utilization, performance, and reliability through FinOps practices.

CI/CD & Delivery Engineering

• Build GitLab CI/CD pipelines, templates, runners, registries, and multi-environment deployments.
• Integrate security controls (SAST, secret scanning, container image scanning) into deployment and automation workflows.
• Implement GitOps approaches using ArgoCD or Flux for declarative, auditable Kubernetes delivery.

Kubernetes & Container Platform

• Manage AKS clusters, container workloads, ingress, autoscaling, and service mesh adoption.
• Maintain Helm chart libraries and containers build pipelines for multi-environment application delivery.
• Troubleshoot Kubernetes issues and implement scalable long-term fixes.

Observability & Reliability

• Drive full-stack observability with Dynatrace, Azure Monitor, and Log Analytics, covering tracing, dashboards, SLOs, and alerting.
• Define and enforce SLOs, error budgets, and reliability standards across the platform.
• Lead incident response, on-call triage, and blameless post-incident reviews.

Security & Compliance (DevSecOps)

• Embed security across the platform through Key Vault secret management, network policies, least-privilege RBAC, and DevSecOps controls.
• Manage cloud security posture using Entra ID, Managed Identities, Azure Policy, Defender for Cloud, NSG, and Private Endpoints.
• Support vulnerability remediation and cloud governance initiatives using Qualys and complementary compliance monitoring platforms.

Leadership & Collaboration

• Lead and mentor DevOps engineers while promoting ownership and continuous improvement.
• Collaborate with engineering, product, and business stakeholders to improve the inner developer loop and overall developer experience.
• Document architectural decisions and platform standards clearly.

REQUIRED QUALIFICATIONS

• 5+ years in DevOps, Cloud, or SRE roles, including 2+ years as lead or architect.
• Hands-on Azure production experience across AKS, API Management, Application Gateway, Front Door, networking, Key Vault, Service Bus, and Event Hub.
• Proficiency in Terraform — modular design, remote state management, and environment separation.
• Expertise in running Kubernetes in production (AKS specifically) with hands-on Helm and containerized application experience.
• GitLab CI/CD end-to-end: pipelines, runners, environments, container registries, and reusable pipeline templates.
• Strong cloud networking skills: VNet, subnets, NSG, Private Endpoints, DNS, and load balancing.
• Azure security and identity expertise: Entra ID, RBAC, Managed Identities, Key Vault, Azure Policy, and Defender for Cloud.
• Proficiency in scripting with Bash, PowerShell, or Python.
• Strong troubleshooting, root-cause analysis, and production support skills.

PREFERRED QUALIFICATIONS

• Exposure to multi-cloud platforms.
• Familiarity with Azure Devops; GitOps approaches using ArgoCD or Flux.
• FinOps experience: cloud cost optimization, resource rightsizing, reserved capacity planning.
• Exposure to regulated or financial services environments.
• Knowledge of service mesh technologies (i.e. Istio, Linkerd).
• Graduate or postgraduate degree (or equivalent qualification).
• Experience supporting global, cross-functional operational teams.

CERTIFICATIONS

Required (Senior Level)

• AZ-400 — Microsoft DevOps Engineer Expert (minimum requirement for this role)

Strongly Recommended

• AZ-104 — Microsoft Azure Administrator Associate
• AZ-305 — Microsoft Azure Solutions Architect Expert
• CKA — Certified Kubernetes Administrator

Advantageous

• Dynatrace Professional Certification
• HashiCorp Terraform Associate / Professional
• GitLab Certified CI/CD Associate or Professional