Senior Azure Cloud DevSecOps Engineer

• *Senior Azure Cloud DevSecOps Engineer**

• Azure Cloud \& DevOps Practice • Enterprise Platform Engineering*

• *Total Experience:** 8\+ years

• *Relevant Experience:** 5\+ years (minimum 2 years in lead / architect capacity)

• *Primary Platform:** Microsoft Azure

• *Engagement Type:** Enterprise production, multi\-region, regulated cloud environments

• *Required Certification:** AZ\-400 DevOps Engineer Expert (minimum for senior role)

• *ABOUT THE ROLE \& ORGANISATION**

We are building a secure, scalable Azure platform that supports critical enterprise operations and enables faster, more reliable delivery.

The DevOps team owns infrastructure lifecycle, CI/CD, Kubernetes, observability, and platform reliability in close partnership with engineering, security, and operations teams.

• *ROLE OVERVIEW**

The Senior Azure Cloud DevSecOps Engineer leads the design and improvement of secure, scalable, highly available Azure infrastructure.

This role combines platform engineering, automation, CI/CD, observability, DevSecOps, and technical leadership in regulated enterprise environments.

• *KEY SKILLS \& TECHNOLOGY STACK**

• *Category****Technologies / Tools**

• *Cloud Platform**Microsoft Azure

• *Azure Services**AKS, API Management, Application Gateway, Front Door, VNet, Private Link, Key Vault, Service Bus, Event Hub, Azure Monitor, Log Analytics

• *IaC \& Automation**Terraform (modular, remote state, env separation), Bash, PowerShell, Python

• *CI/CD**GitLab CI/CD (pipelines, runners, registries, reusable templates), Azure DevOps, Jenkins

• *Containers \& K8s**AKS, Helm, Docker, Service Mesh (Istio / Linkerd — advantage), GitOps: ArgoCD / Flux

• *Observability**Dynatrace (full\-stack, distributed tracing, dashboards, alerting), Azure Monitor, Log Analytics

• *Security \& Identity**Entra ID (Azure AD), RBAC, Managed Identities, Key Vault, Azure Policy, Defender for Cloud, NSG, Private Endpoints

• *Vulnerability Mgmt**Qualys, cloud compliance \& posture management tooling

• *Networking**VNet, Subnets, NSG, DNS, Load Balancing, Private Endpoints, Application Gateway, Front Door

• *FinOps**Cloud cost optimization, resource rightsizing, reserved capacity planning

• *KEY RESPONSIBILITIES**

• *Cloud Architecture \& Platform Ownership**

• Own Azure cloud and DevOps architecture, standards, and reusable reference patterns.
• Design and maintain Terraform modules for production\-grade, multi\-region infrastructure with clear environment separation.
• Govern core Azure services including AKS, API Management, Application Gateway, Front Door, networking, Key Vault, Service Bus, and Event Hub.
• Optimize cost, utilization, performance, and reliability through FinOps practices.

• *CI/CD \& Delivery Engineering**

• Build GitLab CI/CD pipelines, templates, runners, registries, and multi\-environment deployments.
• Integrate security controls (SAST, secret scanning, container image scanning) into deployment and automation workflows.
• Implement GitOps approaches using ArgoCD or Flux for declarative, auditable Kubernetes delivery.

• *Kubernetes \& Container Platform**

• Manage AKS clusters, container workloads, ingress, autoscaling, and service mesh adoption.
• Maintain Helm chart libraries and containers build pipelines for multi\-environment application delivery.
• Troubleshoot Kubernetes issues and implement scalable long\-term fixes.

• *Observability \& Reliability**

• Drive full\-stack observability with Dynatrace, Azure Monitor, and Log Analytics, covering tracing, dashboards, SLOs, and alerting.
• Define and enforce SLOs, error budgets, and reliability standards across the platform.
• Lead incident response, on\-call triage, and blameless post\-incident reviews.

• *Security \& Compliance (DevSecOps)**

• Embed security across the platform through Key Vault secret management, network policies, least\-privilege RBAC, and DevSecOps controls.
• Manage cloud security posture using Entra ID, Managed Identities, Azure Policy, Defender for Cloud, NSG, and Private Endpoints.
• Support vulnerability remediation and cloud governance initiatives using Qualys and complementary compliance monitoring platforms.

• *Leadership \& Collaboration**

• Lead and mentor DevOps engineers while promoting ownership and continuous improvement.
• Collaborate with engineering, product, and business stakeholders to improve the inner developer loop and overall developer experience.
• Document architectural decisions and platform standards clearly.

• *REQUIRED QUALIFICATIONS**

• 5\+ years in DevOps, Cloud, or SRE roles, including 2\+ years as lead or architect.
• Hands\-on Azure production experience across AKS, API Management, Application Gateway, Front Door, networking, Key Vault, Service Bus, and Event Hub.
• Proficiency in Terraform — modular design, remote state management, and environment separation.
• Expertise in running Kubernetes in production (AKS specifically) with hands\-on Helm and containerized application experience.
• GitLab CI/CD end\-to\-end: pipelines, runners, environments, container registries, and reusable pipeline templates.
• Strong cloud networking skills: VNet, subnets, NSG, Private Endpoints, DNS, and load balancing.
• Azure security and identity expertise: Entra ID, RBAC, Managed Identities, Key Vault, Azure Policy, and Defender for Cloud.
• Proficiency in scripting with Bash, PowerShell, or Python.
• Strong troubleshooting, root\-cause analysis, and production support skills.

• *PREFERRED QUALIFICATIONS**

• Exposure to multi\-cloud platforms.
• Familiarity with Azure Devops; GitOps approaches using ArgoCD or Flux.
• FinOps experience: cloud cost optimization, resource rightsizing, reserved capacity planning.
• Exposure to regulated or financial services environments.
• Knowledge of service mesh technologies (i.e. Istio, Linkerd).
• Graduate or postgraduate degree (or equivalent qualification).
• Experience supporting global, cross\-functional operational teams.

• *CERTIFICATIONS**

• *Required (Senior Level)**

• **AZ\-400 — Microsoft DevOps Engineer Expert (minimum requirement for this role)**

• *Strongly Recommended**

• AZ\-104 — Microsoft Azure Administrator Associate
• AZ\-305 — Microsoft Azure Solutions Architect Expert
• CKA — Certified Kubernetes Administrator

• *Advantageous**

• Dynatrace Professional Certification
• HashiCorp Terraform Associate / Professional
• GitLab Certified CI/CD Associate or Professional