We are seeking an experienced Senior DevOps Engineer to spearhead the design, implementation, and delivery of a Unified Automation Platform. This role will lead the technical direction across Backstage developer portal capabilities, infrastructure automation, cloud (Azure & VMware) provisioning, security integration, and observability. The ideal candidate will combine hands-on technical expertise with leadership to drive Platform Engineering and self-service automation at enterprise scale. Responsibilities Assist with design and implementation of an internal developer platform using Backstage (Software Catalogue, Scaffolder, TechDocs, Search) Establish multi-tenancy models with org hierarchy and granular RBAC beyond basic authentication Integrate Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications Define golden path templates and self-service workflows for development teams Deliver Infrastructure as Code using Terraform/OpenTofu and Configuration as Code using Ansible Implement GitOps workflows for continuous deployment and drift management Automate provisioning and management of Azure services: VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres) Lead Kubernetes (AKS) provisioning, cluster management, and operational dashboards Build and maintain image factory pipelines for VM and container golden images Requirements 3+ years of experience as a DevOps Engineer, with expertise in Terraform / OpenTofu and Ansible Knowledge of Azure networking and security services: VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables Experience with Azure compute services: App Services, Container Apps, and Function Apps Proficiency in Azure databases: Azure SQL, Cosmos DB, and Azure Postgres Expertise in Kubernetes / AKS provisioning, cluster management, ops dashboards, and Docker Skills in Azure DevOps (ADO) pipeline automation and integration English proficiency at B2 level or higher Nice to have Familiarity with Backstage (developer portals, plugins, Scaffolder, TechDocs, Software Catalog, Search), self-service platform design, multi-tenancy and granular RBAC models Knowledge of GitOps tools such as ArgoCD / Flux, continuous deployment, and drift management Background in Identity & Access management: Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, RBAC Experience with Secrets Management: Azure Key Vault, OpenBao / HashiCorp Vault, dynamic secrets Skills in scripting and automation: Python, Bash, PowerShell, REST API integration Familiarity with networking tools: DNS automation, IPAM (NetBox) Understanding of observability practices: monitoring, metrics, logging, basic observability tooling Knowledge of virtualization (VMware): vSphere, vSAN, NSX-T, SRM, DRS Experience with Azure VMware Solution (AVS): hybrid/on-prem workload management Expertise in Image Factory: VM and container golden image pipelines Knowledge of Certificate Management: Venafi Experience with Policy as Code: OPA / policy engine implementation Familiarity with Privileged Access Management (PAM): break-the-glass integration Knowledge of DevSecOps Tooling: SAST, DAST, SCA, IAST, ASPM integration Experience with Security Alerting: SIEM & WAF alert integration Familiarity with Firewalls: PaloAlto, F5, Cloudflare Knowledge of ITSM / CMDB Integration: component request workflows, artifact repositories Experience with Vulnerability Management: vulnerability dashboards and reporting Skills in Documentation Automation: Solution Design Document (SDD) generation
