DevOps Engineer

The DevOps Engineer will design, automate, and operate secure cloud and platform capabilities supporting application and data workloads. The role covers Infrastructure as Code, CI/CD, GitOps, artifact management, observability, and platform reliability across Microsoft Azure and Kubernetes environments.

Responsibilities

• Design, provision, and operate secure, reliable Microsoft Azure and Kubernetes platform capabilities supporting application and data workloads.
• Develop reusable Terraform modules and automated provisioning controls to increase Infrastructure as Code coverage and reduce configuration drift and manual intervention.
• Automate platform configuration, upgrades, health checks, backup validation, recovery procedures, and recurring operational tasks.
• Support engineers and researchers to build and run CI/CD workflows using GitLab CI and/or Jenkins.
• Establish monitoring, alerting, and operational dashboards using Prometheus; define and monitor service-level indicators and objectives with service owners.
• Collaborate with software, data, security, architecture, and infrastructure teams; communicate progress, dependencies, risks, and trade-offs clearly.

Requirements

• At least 5 years of experience in DevOps, cloud engineering, platform engineering, or a related field.
• Hands-on experience designing, deploying, and supporting production workloads in Microsoft Azure.
• Strong practical experience with Terraform, including reusable modules and state management.
• Experience designing, implementing, and maintaining secure CI/CD workflows, automated testing, and release controls.
• Proficiency in Linux administration and production-system troubleshooting.
• Scripting and automation capability using Python, Bash or a comparable language.

Preferred Qualifications

• A bachelor’s degree or equivalent practical experience; a master’s degree is advantageous.
• Strongly preferred: experience with Argo CD and Helm for GitOps-based Kubernetes delivery.
• Advantageous: experience with AKS, Azure networking, Entra ID or workload identity, and private endpoints.