DevOps Engineer – Secure CI/CD & AKS Specialist

About the role

We are looking for a seasoned DevOps Engineer to embed security throughout our development lifecycle and to drive automation for a large‑scale Azure‑based data platform. You will design, implement and manage resilient CI/CD pipelines, oversee AKS clusters, and ensure compliance with industry standards.

Key responsibilities

• Deploy, administer and optimise Azure Kubernetes Service (AKS) clusters for production workloads.
• Design, implement and maintain CI/CD pipelines using Azure DevOps (YAML), Terraform, Bicep and ARM templates.
• Manage and support Apache NiFi, Azure Event Hub and Azure Functions as part of the data platform.
• Monitor platform health, performance and availability with Azure Monitor, Log Analytics and Application Insights.
• Automate infrastructure provisioning, perform cluster upgrades, patch management, capacity planning and performance tuning.
• Enforce platform security, governance, compliance and access controls.
• Configure AKS networking, ingress controllers, storage, autoscaling and manage container images in Azure Container Registry.
• Collaborate with Data Engineering and cross‑functional teams, support production incidents and drive continuous improvement.

Required profile

• 8+ years of overall IT experience, with at least 5 years in cloud infrastructure engineering.
• 4+ years hands‑on experience managing Kubernetes platforms, preferably AKS.
• 3+ years supporting enterprise‑scale data platforms and practicing DevOps/SRE.
• Strong understanding of Azure networking, security hardening and disaster recovery.

Required skills

• Azure Kubernetes Service (AKS) – deployment, administration, upgrades, RBAC, networking.
• Kubernetes networking – Services, Ingress, Load Balancers, DNS, Network Policies, Istio (preferred).
• Docker & containerisation – image creation, multi‑stage builds, security scanning.
• Azure DevOps – YAML pipelines, CI/CD, Git, branching strategies.
• Infrastructure as Code – Terraform, Bicep, ARM templates.
• Azure monitoring tools – Azure Monitor, Log Analytics, Application Insights.
• Azure networking components – VNets, Subnets, Private Endpoints, Peering, NSGs, UDRs, Azure Firewall, VPN.
• Azure Container Registry (ACR) management.