Cloud Infrastructure & DevOps Engineer

About the role

We are looking for a Cloud Infrastructure & DevOps Engineer to operate and support our enterprise‑scale Microsoft Azure environment. The role focuses on day‑to‑day administration, monitoring, and release execution rather than building new platform components.

Key responsibilities

• Administer Azure subscriptions, resource groups, networking, identity, RBAC, policies, Key Vault, monitoring and cost controls for Citadel Platform and AI Application Landing Zones.
• Maintain Terraform‑based Infrastructure as Code: modules, state/backends, workspaces, plan/apply workflows, drift detection and remediation.
• Operate CI/CD pipelines on GitHub Enterprise Server, including workflows, self‑hosted runners and Azure DevOps integration.
• Ensure all infrastructure changes are version‑controlled and deployed via approved CI/CD processes.
• Monitor platform health, capacity, security alerts and integration failures; support incident triage and root‑cause analysis.
• Execute controlled releases, verify deployments and perform rollbacks following change‑management procedures.
• Troubleshoot network, identity, API, data‑access and connectivity issues across Azure, GCP and on‑premise systems.
• Maintain runbooks, deployment checklists, configuration inventories and conduct knowledge‑transfer sessions.

Required profile

• Minimum 3 years of hands‑on Microsoft Azure administration and operations experience.
• Strong practical experience with Terraform and Infrastructure as Code.
• Preferred certifications: Azure Administrator Associate (AZ‑104) and optionally Azure DevOps Engineer (AZ‑400), Terraform Associate, Azure Security Engineer (AZ‑500) or Identity Administrator (SC‑300).

Required skills

• Microsoft Azure administration (subscriptions, resource groups, landing zones, networking, IAM/RBAC, policies, Key Vault).
• Terraform (module design, state management, drift remediation).
• GitHub Enterprise Server, GitHub Actions, self‑hosted runners.
• CI/CD pipeline design and operation.
• Azure networking components (VNET, DNS, routing, load balancers, firewalls).
• Scripting in PowerShell, Bash or Python.
• Monitoring and logging tools (Azure Monitor, Log Analytics, Prometheus, Grafana, ELK/OpenSearch).
• Release management, deployment verification and rollback procedures.
• Basic knowledge of Docker, Kubernetes or OpenShift.
• Familiarity with ServiceNow/ITSM processes.