Lead DevOps Engineer

We are seeking a Lead DevOps Engineer to lead Azure platform automation across Azure infrastructure, AKS, identity, and golden-image pipelines in our Software, System, and Test Engineering group. You will drive CI/CD-based delivery and reliability for our IaC engine and partner with architects to standardize and scale. Responsibilities Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres based on Azure Architect designs Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster and node-pool provisioning and namespace onboarding Configure AKS add-ons including ingress, cert-manager, external-dns, monitoring, and policy Implement identity wiring for Azure workloads using managed identities and SPN or app registrations Integrate secrets management using Azure Key Vault and OpenBao for Azure workloads Build and maintain Image Factory pipelines for VM and container golden images across Linux and Windows baselines Execute Ansible playbooks for VM post-provisioning and golden-image handoff Support Backstage golden-path templates for Azure provisioning and validate generated infrastructure end-to-end Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption Contribute to module testing, drift detection, and documentation aligned with the Infrastructure as Code Engine standards Requirements 5+ years of experience building and operating Microsoft Azure infrastructure via Terraform/OpenTofu with CI/CD using Azure DevOps Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management Leadership experience guiding Infrastructure as Code standards, reviews, and delivery across teams Project delivery experience troubleshooting and remediating production issues across Azure automation during Implementation and Adoption Strong Terraform/OpenTofu skills for modular infrastructure design, testing, and drift detection Strong Ansible skills for Configuration as Code, VM post-provisioning, and golden-image pipeline integration Solid Azure networking knowledge including VNets, private endpoints, and NSGs for integration with a network foundation Strong Azure identity knowledge including managed identities, SPN/app registrations, and secrets integration with Azure Key Vault and OpenBao Effective collaboration skills to partner with Azure and Network Architects and support Backstage golden-path adoption English proficiency at B2 level or higher Nice to have Experience with Azure VMware Solution (AVS) private cloud provisioning Familiarity with image hardening and scanning tooling Experience publishing images using Azure Shared Image Gallery