We're looking for a skilled Lead DevOps Engineer to guide the development and delivery of a Unified Automation Platform. This person will drive technical strategy for the Backstage developer portal, infrastructure automation, cloud provisioning (Azure & VMware), security integration, and observability. The ideal candidate blends great technical skills with leadership abilities to advance Platform Engineering and enterprise-scale self-service automation. Responsibilities Support the design and build-out of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search) Build multi-tenancy structures with org hierarchy and detailed RBAC that go beyond basic authentication Connect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications Create golden path templates and self-service workflows for development teams Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible Set up GitOps workflows to manage continuous deployment and drift Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres) Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards Develop and maintain image factory pipelines for VM and container golden images Requirements Over 5 years of DevOps engineering experience, with strong skills in Terraform/OpenTofu and Ansible At least 1 year of leadership experience Solid understanding of Azure networking and security services, such as VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps Strong knowledge of Azure databases, such as Azure SQL, Cosmos DB, and Azure Postgres Deep expertise in Kubernetes/AKS provisioning, cluster management, ops dashboards, and Docker Proven skills in Azure DevOps (ADO) pipeline automation and integration English proficiency at B2 level or above Nice to have Experience with Backstage, including developer portals, plugins, Scaffolder, TechDocs, Software Catalog, and Search, plus self-service platform design and multi-tenancy/RBAC models Familiarity with GitOps tools like ArgoCD or Flux, along with continuous deployment and drift management Background in Identity & Access Management, covering Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, and RBAC Knowledge of Secrets Management tools such as Azure Key Vault, OpenBao/HashiCorp Vault, and dynamic secrets Scripting and automation skills in Python, Bash, PowerShell, and REST API integration Understanding of networking tools, including DNS automation and IPAM (NetBox) Awareness of observability practices, such as monitoring, metrics, logging, and basic tooling Experience with VMware virtualization, including vSphere, vSAN, NSX-T, SRM, and DRS Exposure to Azure VMware Solution (AVS) for hybrid/on-prem workload management Expertise in Image Factory pipelines for VM and container golden images Knowledge of Certificate Management tools like Venafi Experience implementing Policy as Code using OPA or similar policy engines Familiarity with Privileged Access Management (PAM), including break-the-glass integration Understanding of DevSecOps tooling, such as SAST, DAST, SCA, IAST, and ASPM integration Experience with Security Alerting through SIEM and WAF integrations Knowledge of firewall platforms like PaloAlto, F5, and Cloudflare Familiarity with ITSM/CMDB integration, including component request workflows and artifact repositories Experience with Vulnerability Management dashboards and reporting Skills in Documentation Automation, including generating Solution Design Documents (SDD)
