DevOps Engineer - Azure

DevOps Engineer - Azure (6-8 Years Experience)

Role Overview

Key Responsibilities

1. Azure Infrastructure Engineering

• Design, deploy, and manage cloud infrastructure using

  Azure Landing Zone principles

  .
• Build production-grade architectures involving:
• Azure App Services / Container Apps / AKS
• Azure SQL, MySQL Flexible Server
• Azure Storage & Private Endpoints
• Azure API Management (APIM)
• Application Gateway + WAF
• Azure Key Vault (Dapr or managed identity integration)
• Azure Monitor, Log Analytics, Defender for Cloud
• VNETs, NSGs, Private DNS, Firewall
• Drive end-to-end environment provisioning across

  Dev/Test/UAT/Prod

  , aligning with customer naming conventions and compliance.

2. CI/CD & Automation

• Implement and maintain CI/CD pipelines using

  Azure DevOps or GitHub Actions

  .
• Automate application deployment for services.
• Apply best practices for:
• Build versioning, artifact management, release gates
• IaC-driven environment promotion
• Blue/Green or Rolling deployments
• Secrets management via Key Vault + managed identity

3. Infrastructure as Code (IaC) - Terraform

• Author, modularize, and optimize

  Terraform configurations

  for reusable infrastructure setups.
• Implement state management with remote backends and workspaces.
• Enforce coding standards, tagging policies, and cost-controlled resource definitions.

4. Security, Governance & Compliance

Cloud Security Best Practices

• Enforce

  Zero Trust

  principles:
• No secrets in code
• Use

  Managed Identities

  everywhere
• Role-based access control (RBAC) with least privilege
• Configure

  WAF policies

  , IP restrictions, NSGs, and conditional access.
• Implement secure patterns for:
• Key rotation using Key Vault
• Private endpoints instead of public exposure
• Blueprint-compliant naming, tagging & cost governance
• Ensure regulatory compliance (SOC2, ISO27001, GDPR where applicable).

5. Observability & Reliability

• Implement end-to-end monitoring using

  Azure Monitor

  ,

  App Insights

  ,

  Log Analytics

  , and

  Prometheus/Grafana

  (if container workloads).
• Set up:
• Alerts, dashboards, SLOs/SLIs, error budgets
• Distributed tracing for microservices
• Cost optimization dashboards

6. Containers, Microservices & Orchestration

• Manage and deploy microservices using:
• Azure Container Apps
• Docker
• Azure Kubernetes Service (AKS)
• Dapr sidecar integrations (desirable)
• Optimize container images, orchestrate workloads, and implement CI/CD for containers.

7. Collaboration & Delivery

• Work closely with project delivery teams, solution architects, and developers.
• Participate in architectural reviews and ensure deployments follow approved patterns.
• Support production releases, incident response, root-cause analysis, and performance tuning.
• Mentor junior DevOps engineers in the Kochi team.

Required Skills & Experience

Core Technical Skills

• 6-8 years of hands-on Azure DevOps experience
• Strong proficiency in:

• Terraform

  (mandatory)

• GitHub Actions / Azure DevOps Pipelines

• Azure Networking, VNETs, NSGs, Firewall

• Azure Kubernetes (AKS) or Container Apps

• Application Gateway + WAF

• Azure SQL / MySQL / Redis / Storage

• API Management

• Azure Monitor, Log Analytics

• Experience implementing

  Managed Identity + Key Vault

  for secure application access.

Security Skills

• Azure Defender configuration
• Azure Policies & Governance
• Hardening of virtual networks, endpoints, identity, and workloads
• Secretless pipelines & shift-left security practices
• Familiarity with OWASP, NIST, CIS Benchmarks

Soft Skills

• Strong troubleshooting & analytical thinking
• Clear verbal/written communication with global stakeholders
• Ability to manage multiple environments & deadlines
• Ownership mindset & proactive risk escalation

Nice-to-Have Skills

• Experience with:
• Dapr sidecars for microservices
• GitOps (Flux/ArgoCD)
• Azure Bicep
• Serverless: Azure Functions, Logic Apps
• PowerShell/Go/Python scripting
• ERP or enterprise-scale integration environments
• AI workloads (Azure OpenAI, vector databases)
• Certifications:

• AZ-104

  ,

  AZ-305

  ,

  AZ-400

  (preferred)