About the Role

We are looking for a Senior DevOps Engineer to design, build, and evolve our Azure-based cloud platform, which serves as the foundation for engineering teams and multiple client environments.

You will treat the platform as a product: building reusable, self-service infrastructure, standardized deployment paths, and secure-by-default environments that let developers ship quickly and safely. You'll own Azure landing zones, Terraform module libraries, AKS-based runtime platforms, and CI/CD pipelines across Dev, UAT, and Production.

You will work closely with engineering teams, architects, and client stakeholders to deliver reliable infrastructure, smooth developer experience, and operational excellence.

Key Responsibilities

Azure Platform Engineering

- Design and implement scalable, resilient infrastructure on Microsoft Azure using landing zone and hub-spoke architecture principles.
- Build and maintain standardized, isolated environments for Dev, UAT, and Production across subscriptions and management groups.
- Establish secure connectivity with client infrastructure using VPN Gateway, ExpressRoute, VNet Peering, and Private Endpoints.
- Ensure high availability and disaster recovery using Availability Zones, paired regions, and backup/restore strategies.

Infrastructure as Code & Platform Self-Service

- Develop and maintain infrastructure with Terraform (azurerm / azapi providers), following IaC best practices such as remote state, modular design, and environment promotion.
- Build and publish a reusable Terraform module library so teams can provision approved resources in a consistent, self-service way.
- Enforce governance and guardrails using Azure Policy, RBAC, tagging standards, and naming conventions.
- Implement version-controlled, peer-reviewed infrastructure changes with automated plan/apply workflows.

Container Platform (AKS)

- Design, operate, and upgrade Azure Kubernetes Service (AKS) clusters as a shared runtime platform for product workloads.




- Manage Azure Container Registry (ACR), image scanning, ingress controllers, autoscaling, and workload identity.
- Define platform "golden paths" and templates to reduce onboarding time for new services.

CI/CD and Deployment Automation

- Build and maintain CI/CD pipelines using Azure DevOps Pipelines and/or GitHub Actions.
- Enable continuous delivery with multi-stage pipelines, approval gates, and safe deployment strategies such as blue-green, canary, and deployment slots.
- Integrate security and quality checks into pipelines, including SAST, dependency scanning, IaC scanning, and container image scanning.
- Partner with development teams to streamline workflows and improve developer experience.

Azure Networking & Security

- Design and manage Azure networking architecture, including:
- Virtual Networks (VNets), subnets, and hub-spoke topology
- Azure Load Balancer, Application Gateway (WAF), and Azure Front Door
- Network Security Groups (NSGs) and Azure Firewall
- User-defined routes, NAT Gateway, and Private DNS Zones
- Manage identity and access through Microsoft Entra ID, Managed Identities, and least-privilege RBAC.
- Manage secrets, keys, and certificates using Azure Key Vault.
- Implement security best practices aligned with Microsoft Defender for Cloud recommendations and compliance requirements.

Web & Platform Operations

- Manage Azure DNS, domain configuration, and hosting for customer-facing SaaS platforms (App Service, AKS, Front Door).
- Own the SSL/TLS certificate lifecycle, with automated renewal through Key Vault, cert-manager,



or App Service Managed Certificates.
- Ensure high uptime, low latency, and consistent performance for hosted platforms.

Observability, Reliability & Cost

- Implement monitoring, alerting, and logging using Azure Monitor, Log Analytics, and Application Insights, with Prometheus/Grafana for AKS workloads.
- Define and track SLIs/SLOs for platform services and participate in on-call rotations and incident response.
- Lead production troubleshooting, root cause analysis, and blameless postmortems.
- Drive FinOps practices using Azure Cost Management, right-sizing, reservations, and autoscaling.
- Maintain runbooks, architecture documentation, and platform onboarding guides.

Required Qualifications

- 6+ years of experience in DevOps, Cloud, or Platform Engineering, ideally in a product-based company.
- Robust hands-on experience with Microsoft Azure (compute, networking, identity, storage, and PaaS services).
- Advanced Terraform experience, including building reusable modules and managing state across multiple environments.
- Production experience with AKS and Docker.
- Solid understanding of Azure networking: VNets, NSGs, Application Gateway, Front Door, Private Endpoints, and hybrid connectivity.
- Experience building CI/CD pipelines in Azure DevOps or GitHub Actions.
- Experience managing multi-environment deployments (Dev/UAT/Prod).
- Experience with DNS and SSL/TLS certificate management.
- Strong troubleshooting and infrastructure debugging skills, plus scripting ability in Bash, PowerShell, or Python.

Preferred Skills

- Azure certifications such as AZ-104, AZ-305, AZ-400, or CKA/CKAD.
- Familiarity with Bicep/ARM templates alongside Terraform.
- Experience with Datadog, ELK, or Grafana stacks alongside Azure-native monitoring.
- Experience with policy-as-code (Azure Policy, OPA/Gatekeeper) and DevSecOps practices.
- Background supporting multi-tenant, client-facing SaaS platforms.

📌 Senior DevOps Engineer (Maharashtra)
🏢 ORMAE
📍 Maharashtra