Senior DevOps Engineer

Opella

We aim to be a positive force by embedding sustainability throughout our operations and culture. To succeed, we seek talented individuals who can transform our business and support our mission to become the world's best fast-moving consumer healthcare (FMCH) company in and for the world.

Find out more about our mission at www.opella.com

About the Role

• As a Senior DevOps, you will play a critical role in implementing, securing, automating, and operating the target-state cloud architecture across multiple projects and delivery teams.
• You will work at the intersection of cloud infrastructure, data platform engineering, networking, identity, security, and deployment automation, translating architectural designs into scalable, production-ready solutions.
• You will drive Infrastructure as Code, CI/CD standardization, and platform automation across Microsoft Azure, Azure Databricks, Astronomer Astro, and Github, ensuring consistency, reliability, and governance across environments.
• You will collaborate with enterprise architects, cloud platform teams, data engineers, security specialists, and network teams to resolve complex technical dependencies and establish reusable engineering practices across projects.

Key Responsibilities

• Design, provision, and manage secure, scalable, and resilient Azure cloud infrastructure using Terraform, including networking, storage, compute, monitoring, private endpoints, DNS, and security configurations.
• Develop reusable Terraform modules and automated infrastructure provisioning workflows, implementing version control, remote state management, environment separation, policy validation, and infrastructure drift detection.
• Implement and maintain GitHub Actions CI/CD pipelines for infrastructure, Azure Databricks assets, and Astronomer deployments, including automated validation, security scanning, approvals, release management, and rollback.
• Provision, configure, secure, and support Azure Databricks workspaces, Unity Catalog, access controls, compute policies, private connectivity, and automated deployment of data engineering workloads.
• Implement and operate Astronomer (managed Apache Airflow), including deployment and runtime configuration, DAG delivery, dependency management, secrets, monitoring, and integration with Azure Databricks and other enterprise services.
• Design, implement, and troubleshoot Azure networking and connectivity, including VNets, subnets, routing, NSGs, Azure Firewall, Private Endpoints, DNS, ingress/egress controls, and connectivity across cloud and enterprise systems.
• Implement enterprise identity and security integrations using Microsoft Entra ID, SSO, SAML, Azure RBAC, managed identities, service principals, federated authentication, and Azure Key Vault, following least-privilege and security-by-design principles.
• Provide cross-project platform engineering and production support, including incident resolution, root cause analysis, observability, technical documentation, architecture validation, operational readiness, and coordination with infrastructure, security, networking, and delivery teams.

Qualifications

Required Experience & Skills:

• 8-12 years of hands-on experience across DevOps, Cloud Engineering, Platform Engineering, Infrastructure automation, or site reliability engineering, with proven experience supporting enterprise-scale production environments.
• Strong hands-on expertise in Microsoft Azure, including infrastructure provisioning, resource management, cloud networking, monitoring, security, and enterprise platform operations.
• Advanced proficiency in Terraform, including reusable modules, remote state, environment management, infrastructure lifecycle automation, and secure Infrastructure as Code practices.
• Strong experience with GitHub, GitHub Actions, branching strategies, pull request workflows, reusable pipelines, and end-to-end CI/CD automation.
• Hands-on experience with Azure Databricks, including workspace management, Unity Catalog, cluster configuration, volumes management, access governance, and deployment automation.
• Strong knowledge of Azure networking, private connectivity, DNS, routing, firewalls, ingress/egress, and network troubleshooting.
• Strong understanding of cloud security, encryption, least-privilege access, monitoring, vulnerability management, and production support.
• Demonstrated ability to implement target-state architectures, resolve complex technical issues, and support multiple projects concurrently through effective stakeholder collaboration.

Preferred Additional Skills:

• Familiarity with advanced Azure services, Azure landing zones, and enterprise cloud governance capabilities.
• Experience with Kubernetes, AKS, Docker, and scripting using Python, PowerShell, or Bash.
• Knowledge of IaC security tools, observability platforms, FinOps, and disaster recovery.
• Understanding of AI/LLM integration, Model Context Protocol (MCP) servers, and secure integration of AI agents with enterprise tools, APIs, and cloud platforms; exposure to AI-assisted DevOps automation and intelligent operational workflows is an advantage.
• Functional knowledge of FMCG/FMCH business processes is a strong plus for designing solutions aligned with real-world enterprise needs.
• Working knowledge of Snowflake is a plus.

Education

• Bachelor’s degree in computer science, Information Technology, or similar quantitative field of study.
• Fluent in English
• Function effectively within teams of varied cultural backgrounds and expertise sources.
• Relevant certifications in Microsoft Azure, HashiCorp Terraform, or cloud and DevOps engineering are desirable.