DevOps & Cloud Engineer (Azure)

We build and operate digital platforms for large-scale government and enterprise operations — web applications, APIs, AI services, data pipelines and integrations — running on Microsoft Azure. You will own that cloud infrastructure end to end: designing it, automating it, securing it, monitoring it, and keeping it running. The role is deliberately broad, from subscription governance and networking down to build pipelines and production incident response.

Azure infrastructure:

• Design, provision and operate subscriptions, resource groups, tagging, naming standards and governance (Azure Policy, Management Groups).
• Networking: Virtual Networks, subnets, NSGs, Load Balancers, Application Gateway and WAF, Private Endpoints, VPN and ExpressRoute, DNS.
• Compute: Virtual Machines, VM Scale Sets, App Service, Container Apps, Functions and Azure Kubernetes Service.
• Data and storage: Blob and Files, Azure Database for PostgreSQL/MySQL, Azure SQL, Cosmos DB — with backup, restore, retention and disaster recovery.
• Identity and access: Microsoft Entra ID, RBAC, Managed Identities, Service Principals, Key Vault, and integration with on-premises Active Directory and LDAP.
• Cost management: budgets, alerts, right-sizing and reserved instances, and reporting cloud spend to management.
• Hybrid and on-premises infrastructure where it connects to Azure — Linux and Windows servers, self-hosted runners, network links.

Automation and infrastructure as code:

• Define infrastructure declaratively with Terraform or Bicep/ARM — nothing that matters gets clicked through the portal.
• Build reusable modules with clean separation between development, staging and production.
• Automate operational work in Bash, Python and PowerShell.

CI/CD and delivery:

• Build and maintain pipelines in GitHub Actions or Azure DevOps: build, test, security scan, container image publishing and deployment.
• Own container workflows — Docker, Azure Container Registry, image versioning and promotion between environments.
• Operate Kubernetes workloads: Helm, ingress, autoscaling, resource limits, rollouts and rollbacks. GitOps with Argo CD or Flux is a plus.
• Support release management, versioning and deployment notifications across teams.

Reliability, monitoring and security:

• Implement observability with Azure Monitor, Log Analytics and Application Insights alongside Prometheus, Grafana and Loki — dashboards, alerts and log retention.
• Define and track availability, performance and SLO targets; take part in on-call, lead incident response and write the post-mortems.
• Harden the platform: TLS and certificate management, secret rotation, vulnerability and image scanning, least-privilege access, network isolation, audit logging.
• Support the compliance requirements that come with government and enterprise work: data residency, access reviews, audit trails.

Working with the team:

• Work directly with backend, frontend, data and AI engineers — unblock them, and give them safe self-service tooling and local development environments.
• Write documentation, runbooks and architecture diagrams people actually use.
• Contribute to decisions on architecture, capacity and cloud strategy.