Job description

Senior Azure DevOps Engineer

Experience

6+ years of hands-on experience in DevOps, DevSecOps, Cloud Infrastructure, Kubernetes, CI/CD, and Infrastructure Automation, with strong experience in Azure-based cloud environments and containerized application platforms.

Role Overview

The Senior DevOps / DevSecOps Engineer will be responsible for designing, implementing, automating, and maintaining the cloud infrastructure and deployment platform for the Lidl project. The role will focus on Azure infrastructure, Kubernetes/AKS, Argo CD, Argo Workflows, Terraform, Helm, Azure Blob Storage, Azure File Share, CI/CD automation, security, observability, and production operations.

The engineer will work closely with application development, architecture, security, and platform teams to ensure reliable, secure, scalable, and automated application delivery across Dev, QA/UAT, and Production environments.

Key Roles and Responsibilities

1. Azure Cloud Infrastructure

- Design, provision, configure, and maintain Azure cloud infrastructure for application workloads.
- Manage Azure resources required for application hosting, networking, security, storage, identity, and monitoring.
- Work with Azure Kubernetes Service (AKS) for containerized application workloads.
- Manage Azure Container Registry (ACR) for container image storage and distribution.
- Configure and manage Azure Key Vault for secure storage and consumption of secrets, certificates, and sensitive configuration.
- Configure and manage Azure Storage Accounts & Azure File Shares for storages and Front end deployments.
- Configure and manage Azure Cloud Databases and backups, server monitoring, Start and Stop, Query heavy processing queries.
- Implement appropriate Azure access controls using Azure RBAC and Managed Identities.
- Support infrastructure scalability, availability, disaster recovery, and operational resilience.

2. Kubernetes / AKS

- Strong hands-on experience in Kubernetes and AKS.
- Deploy and manage microservices and containerized workloads on Kubernetes.
- Work with Kubernetes resources such as:
- Deployments
- Services
- ConfigMaps
- Secrets
- Ingress
- Service Accounts
- Jobs/CronJobs
- Configurations and resource limits

- Troubleshoot pod failures, scheduling issues, image-pull failures, networking issues, configuration issues, and application deployment failures.
- Configure resource requests/limits, autoscaling, health probes, and rollout strategies.
- Understand Kubernetes networking, service discovery, namespaces, RBAC, and persistent storage.

3. Argo CD / GitOps

- Strong hands-on experience with Argo CD and GitOps-based deployment models.
- Implement and maintain GitOps-based application deployment processes.
- Manage Argo CD applications, projects, repositories, environments, and synchronization strategies.
- Maintain Helm-based deployment configurations and environment-specific values.
- Troubleshoot Argo CD synchronization, deployment, health-check, and configuration issues.
- Implement controlled and auditable deployments across Dev, QA/UAT, and Production.
- Understand GitOps principles and declarative infrastructure/application management.

4. Argo Workflows

- Design, configure, and maintain Argo Workflows for application and platform automation.
- Develop workflow templates for build, validation, migration, deployment, and operational tasks where required.
- Troubleshoot workflow failures, dependencies, parameters, artifacts, secrets, and execution issues.
- Integrate workflows with Kubernetes and other project services.

5. Terraform / Infrastructure as Code

- Strong hands-on experience with Terraform for Azure infrastructure provisioning.




- Develop reusable Terraform modules for project infrastructure.
- Manage Terraform state, variables, outputs, providers, and environment-specific configurations.
- Implement infrastructure changes through controlled CI/CD processes.
- Follow Infrastructure as Code practices to ensure repeatable and consistent environments.
- Review and troubleshoot Terraform plans, state issues, dependencies, and deployment failures.

6. Helm and Application Configuration

- Strong experience with Helm for Kubernetes application deployment.
- Develop and maintain Helm charts and environment-specific values.
- Manage application configurations across Dev, QA/UAT, and Production.
- Integrate Kubernetes deployments with Azure Key Vault and other secure configuration mechanisms.
- Ensure secrets are not hardcoded in source repositories or deployment manifests.

7. CI/CD and Release Automation

- Design, implement, and maintain CI/CD pipelines for microservices and platform components.
- Automate:
- Source validation
- Build
- Unit/integration testing
- Container image creation
- Security scanning
- Image publishing
- Deployment
- Release validation

- Integrate CI/CD pipelines with Git, container registries, Kubernetes, Helm, Argo CD, and Argo Workflows.
- Implement environment-specific deployment strategies for Dev, QA/UAT, and Production.
- Support controlled promotion of application releases between environments.
- Troubleshoot pipeline failures and deployment issues.

8. DevSecOps / Security

- Integrate security practices into CI/CD and infrastructure processes.
- Implement container image vulnerability scanning and dependency/security scanning.
- Ensure secure handling of credentials, tokens, passwords, certificates, and API keys.
- Use Azure Key Vault or approved secret-management mechanisms rather than storing secrets in source code or pipeline configuration.
- Apply least-privilege access using Azure RBAC, Kubernetes RBAC, and service identities.
- Review Kubernetes manifests, Terraform configurations, Dockerfiles, and Helm charts for security issues.
- Support security remediation and compliance requirements.

9. Networking

Solid understanding of cloud and Kubernetes networking, including:

- Azure Virtual Networks (VNet)
- Subnets
- NSGs
- Private endpoints
- DNS
- Load Balancers
- Application Gateway / Ingress
- Routing
- Firewall configuration
- Network security
- Kubernetes Services and Ingress
- Internal vs external traffic
- Connectivity between Azure services and AKS workloads

The engineer should be able to troubleshoot application connectivity, DNS, ingress, load-balancing, and network-related deployment issues.

10. Monitoring, Logging and Operations

- Implement and maintain monitoring and logging for infrastructure and applications.
- Monitor:
- Kubernetes clusters
- Grafana Dashboards
- Pods and nodes
- Application health
- CPU/memory utilization
- Deployment health
- Pipeline health
- Infrastructure availability

- Work with centralized logging and monitoring platforms such as Azure Monitor, Log Analytics, Application Insights, Prometheus, Grafana, or project-specific tools.
- Investigate production incidents using logs, metrics, events, and Kubernetes diagnostics.
- Support alerting, incident management, root-cause analysis, and preventive actions.

11. Production Support





- Provide L2/L3 DevOps and platform support for production environments.
- Troubleshoot deployment, infrastructure, Kubernetes, networking, and configuration issues.
- Support production releases and rollback activities.
- Perform root-cause analysis for recurring infrastructure and deployment issues.
- Participate in incident management and post-incident reviews.
- Maintain operational documentation and troubleshooting procedures.

12. Database / Migration Support

- Understand deployment-related database migration requirements for microservices.
- Support automated database migration processes as part of application deployments where applicable.
- Ensure migrations are executed securely and consistently across environments.
- Coordinate with development teams for migration-related deployment activities.

13. Collaboration and Technical Leadership

- Work closely with developers, architects, QA, security, and infrastructure teams.
- Define and enforce DevOps standards and deployment practices.
- Participate in architecture and infrastructure discussions.
- Review Terraform, Helm, Kubernetes, and CI/CD changes.
- Mentor junior DevOps engineers.
- Identify opportunities to improve automation, reliability, security, and deployment efficiency.

Good to Have

- GCP infrastructure exposure
- Bitbucket pipeline experience
- Azure Application Gateway
- Private Endpoints / Private DNS
- Prometheus and Grafana
- SonarQube
- Trivy or other container vulnerability scanners
- OPA / Kyverno or Kubernetes policy enforcement
- Service Mesh knowledge
- OpenTelemetry
- SRE practices
- Disaster recovery and business continuity
- Cost optimization
- Experience supporting enterprise-scale production platforms
- Knowledge of Nodejs and Python Programming

Expected Hands-on Capability

The candidate should be able to independently perform activities such as:

1. Provision Azure infrastructure using Terraform.
2. Create and maintain AKS-based Kubernetes environments.
3. Deploy microservices using Helm.
4. Configure and maintain Argo CD applications.
5. Develop and maintain Argo Workflows.
6. Build and troubleshoot CI/CD pipelines.
7. Configure secure application access to Azure Key Vault.
8. Manage container images through ACR.
9. Troubleshoot Kubernetes pod, deployment, ingress, and networking issues.
10. Implement security scanning in CI/CD pipelines.
11. Configure monitoring, logging, and alerting.
12. Support production deployments and rollback.
13. Troubleshoot infrastructure and application deployment issues independently.
14. Automate repetitive operational activities using Terraform, Bash, Python, or pipeline automation.

Why Join Hurix Digital?

Hurix is scaling its AI Data Services vertical, and this role is at the center of that growth engine. You'll be backed by strong delivery capabilities, a motivated leadership team, and the autonomy to shape your own market strategy. We reward results with generous commissions and long-term growth opportunities.

How to Apply

Interested candidates are encouraged to send their resume and a cover letter detailing their relevant experience and accomplishments to [email protected].

Hurix is an Equal Employment Opportunity Employer and considers all qualified applicants without regard to race, colour, religion, sex, sexual orientation, gender identity, age, marital status, national origin, protected veteran status, disability, or any other legally protected class.

You must take the necessary steps to safeguard the integrity, security, and confidentiality of shared confidential information.

For additional information on Hurix, please visit: https://www.hurix.com/life-at-hurix/

📌 Azure Devops Engineer (Pune)
🏢 Hurix
📍 Pune