Azure DevOps Engineer

Project description

We are seeking an experienced Azure DevOps Engineer to develop and manage Infrastructure as Code (IaC) using Bicep for Azure PaaS (Platform as a Service) solutions with a focus on private networking. In this role, you will collaborate with development, security, and infrastructure teams to automate and streamline the deployment of secure, scalable, and resilient cloud environments.

Responsibilities

Infrastructure as Code (IaC) Development

Design, develop, and maintain Bicep templates to provision and manage Azure PaaS resources such as :

App Services, Azure Functions, Logic Apps, EventHub, Service Bus, Azure SQL, Azure Storage, Key Vault, API Management, and Cosmos DB.

Ensure IaC templates are modular, reusable, and follow best practices.

Implement parameterization, modules, and consistent naming conventions to enhance template flexibility.

Private Networking & Security

Architect and deploy private networking solutions using :

Private Endpoints, Private Links, Virtual Networks (VNet), Subnets, and Network Security Groups (NSGs).

Configure service integrations with private networking, ensuring traffic stays within the Azure backbone.

Use Application Firewall and policies to enhance security.

Use Azure Key Vault to securely store and manage secrets, certificates, and keys.

CI / CD Pipelines & Automation

Build and manage CI / CD pipelines in Azure DevOps to automate the deployment of Bicep-based PaaS environments.

Integrate IaC pipelines with Biceps for consistent deployment.

Use release gates, approvals, and checks to ensure compliance and security in deployment processes.

Monitoring & Optimization

Implement Azure Monitor, Application Insights, and Log Analytics to monitor PaaS environments.

Create alerts and dashboards to ensure performance, availability, and security visibility.

Optimize PaaS resources for cost, performance, and reliability.

Collaboration & Documentation

Collaborate with cloud architects, security teams, and application developers to design and implement PaaS solutions.

Document infrastructure, deployment processes, and Bicep modules.

Provide guidance and training to development teams on Bicep and Azure networking best practices.

Skills

Must have

Education & Experience :

Bachelor's degree in Computer Science, Information Technology, or related field.

5+ years of experience in Azure DevOps engineering with a focus on PaaS solutions.

Hands-on experience with Azure Bicep and private networking.

Technical Skills :

Strong proficiency with Bicep for IaC, including modular templates and reusable components.

Experience with Azure PaaS services (App Services, Functions, SQL, Storage, API Management).

Expertise in Azure networking, including :

Service and Private Endpoints, Private Links, and VNets.

Network Security Groups (NSGs) and Application Gateway.

Proficiency in CI / CD pipelines using Azure DevOps.

Scripting skills in PowerShell, Bash, or Python for automation tasks.

Familiarity with Azure RBAC and role-based security models.

Soft Skills :

Strong problem-solving and troubleshooting skills.

Effective collaboration and communication abilities.

Detail-oriented with a focus on cloud security and performance.

Nice to have

Azure certifications (e.g., Azure DevOps Engineer Expert, Azure Solutions Architect Expert, or Azure Administrator Associate).

Knowledge of microservices architecture and containerization ( AKS).

Familiarity with Azure Policy and Azure Blueprints.