Senior DevOps/Platform Engineer (Azure)
RemoteUnited States
EXPIREDUnited StatesRemoteFull TimeSenior LevelLarge
Full TimeSenior LevelLarge
Job Summary
Operate private AKS clusters, enforce image signing and scanning within CI/CD pipelines, and design blue-green or canary rollouts with pre-deploy security gates. Own cost optimization across all environments while maintaining documented wake-up processes with defined SLAs. Manage monitoring and observability tooling and lead cross-functional conversations with security, developers, and the CTO regarding phased rollouts across subscriptions. Reframe problems strategically rather than just executing tasks within a mature, non-greenfield Azure-based API Platform.
Required Qualifications
- 6+ years in DevOps / SRE / Cloud / Platform / Infrastructure Engineering
- 3–5+ years of hands-on Azure infrastructure experience, specifically with AKS
- Strong experience with Azure Landing Zone concepts: hub-spoke, segmentation, governance, RBAC, Azure Policy, tagging, and private connectivity
- Proven expertise with Bicep and PR-based IaC workflows (validation/linting/scanning, controlled change, drift awareness)
- Deep knowledge of Azure networking: VNets, NSGs, UDRs/route tables, Private Endpoints/DNS, Load Balancers, NAT Gateway, and secure outbound patterns
- Production experience operating AKS, including private clusters, upgrades, ingress, Helm, autoscaling, and troubleshooting using kubectl (logs/events/probes/DNS/network)
- Experience with APIM / App Gateway / Front Door / WAF and API security patterns (TLS, OAuth2/OIDC, JWT validation, throttling/rate limiting, IP filtering)
- Experience with Azure DevOps YAML pipelines across environments, including approvals/gates and rollback strategy
- Strong security fundamentals: Entra ID RBAC, managed identities/workload identity, Key Vault, secret rotation, and certificate lifecycle management
- Proficiency with Azure CLI, PowerShell, and/or Python for automation and operational tooling
- Strong ownership mindset; comfortable operating in production-critical environments
- Excellent troubleshooting, communication, and documentation skills (runbooks, postmortems, procedures)
- Collaborative approach with developers, security, and platform stakeholders
Desired Qualifications
- Terraform experience
- Hybrid connectivity troubleshooting (VPN/ExpressRoute), Azure Firewall, DNS/routing, private service access
- GitOps (Flux/ArgoCD), service mesh (Istio), Prometheus/Grafana
- Azure certifications (e.g., AZ-400, AZ-305, AZ-104, AZ-500) and FinOps/cost optimization experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.