Senior Devops - Azure
RemoteArgentina or Colombia
Job Summary
Design and automate secure, scalable cloud infrastructure using Terraform, Bicep, and ARM templates for production environments. Manage Azure Kubernetes Service clusters, including provisioning, node pool design, and upgrades, while configuring networking, private endpoints, and Azure Firewall. Implement Microsoft Entra ID, managed identity, and RBAC role assignments, alongside Azure Key Vault for secret consumption. Structure Azure tenants and subscriptions using management groups, Azure Policy, and subscription provisioning within a Git-based CI-driven workflow. Script infrastructure in PowerShell, Bash, or Python to maintain live environments at scale.
Required Qualifications
- 7+ years in infrastructure, platform or DevOps engineering
- 5+ years hands on with Microsoft Azure in production
- 3+ years writing and maintaining Terraform for live environments, not proof of concept work
- Terraform in production at scale: module design, remote state, and state isolation per tenant or subscription
- Bicep or ARM templates for Azure resource deployment
- Azure Kubernetes Service: cluster provisioning, node pool design, cluster upgrades, and cluster-level configuration
- Azure networking: virtual networks, private endpoints and private DNS, Azure Firewall, application gateway or WAF, public DNS and certificate management
- Microsoft Entra ID, managed identity and workload identity, and RBAC role assignment design
- Azure Key Vault and secret consumption patterns for Kubernetes workloads
- Azure tenant and subscription structure: management groups, Azure Policy, and subscription provisioning
- Git-based infrastructure as code workflow, pull request review, and CI-driven plan and apply
- Scripting in PowerShell and in either Bash or Python
- Professional working English
Desired Qualifications
- Microsoft Cloud Adoption Framework and the Azure landing zone accelerator
- Cross-tenant or multi-tenant Azure delivery, Azure Lighthouse, or deploying into a customer-owned subscription
- Azure Marketplace managed applications and private offers
- ArgoCD and Helm
- Ansible
- Azure Policy or Kyverno for guardrails and drift control
- Running Oracle workloads on Azure infrastructure as a service
- Certification: AZ-305, AZ-400 or CKA
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.