Senior DevOps Specialist

Must Have Technical/Functional Skills 5+ years of DevOps, platform engineering, or build/release engineering experience in large enterprise environments. 3+ years of deep, hands-on experience with Azure DevOps and/or GitHub Enterprise in an enterprise multi-team context.

Expert-level proficiency in infrastructure-as-code:

Terraform required; Bicep strongly preferred. Strong experience with containerization and

AKS:

Helm chart development, Kustomize, namespace management, and workload identity.

Proficiency in scripting:

PowerShell and/or Python; experience with Azure CLI and REST APIs. Proven experience implementing DevSecOps toolchains in regulated enterprise environments. Working knowledge of enterprise Azure networking as it pertains to deployment pipelines: Private Endpoints, self-hosted agents in VNets, ExpressRoute-connected environments

Required/Preferred Certifications:

AZ-400 (Highly Desirable) | AZ-104 | AZ-305 | CKA (Beneficial) | GitHub Actions Certification Roles & Responsibilities CI/CD Pipeline Engineering Design, build, and operate enterprise CI/CD pipelines using Azure DevOps Pipelines (YAML-based, multi-stage) and GitHub Actions, supporting 50+ development teams across the organization.

Implement and enforce DevSecOps gates:

SAST/DAST

scanning (Microsoft Defender for DevOps, Snyk), dependency auditing, secrets detection, and container image scanning via Microsoft Defender for Containers. Develop reusable pipeline templates, task groups, and shared library components to standardize delivery across all Azure DevOps organizations.

Champion shift-left quality practices:

automated unit/integration/performance testing integrated into deployment pipelines with quality gates Infrastructure Automation & Cloud Engineering Own and extend the organization's Azure infrastructure-as-code estate using Terraform and Bicep; manage state backends in Azure Storage with Terraform Cloud/Atlantis. Design and maintain Azure Landing Zone configurations including Management Group hierarchy, Azure Policy initiatives, RBAC assignments, and Subscription vending automation. Automate provisioning and lifecycle management of Azure PaaS services: AKS, Azure SQL, Azure Service Bus Storage Accounts, Key Vault, and App Services. Integrate infrastructure pipelines with enterprise CMDB (ServiceNow) for automated asset registration and compliance reporting. Release Management & GitOps Define and govern enterprise release management processes, br anching strategies (trunk-based development), and GitOps workflows using ArgoCD or Flux on AKS. Manage Azure Artifacts feeds for NuGet, npm, Maven, and container image artefacts across the enterprise; implement retention and promotion policies. Platform Reliability & Operational Excellence Define and monitor DevOps DORA metrics (Deployment Frequency, Lead Time, MTTR, Change Failure Rate) and publish dashboards to engineering leadership. Collaborate with the SRE team to implement progressive delivery patterns: blue/green deployments, canary releases, and feature flag management using Azure App Configuration. Manage Azure cost efficiency for CI/CD infrastructure: Microsoft-hosted and self-hosted agent pools, ephemeral build agents, and pipeline optimization for build minutes. Governance, Security & Compliance Ensure all pipelines and infrastructure comply with enterprise security standards, including CIS Benchmarks for Azure, Microsoft Cloud Security Benchmark (MCSB), and internal control frameworks. Maintain pipeline audit trails and artefact provenance in alignment with

SOC 2, ISO

27001, and regulatory requirements. Generic Managerial Skills, If any Partner with Enterprise Architecture and Security teams to implement supply chain security controls (SBOM generation, SLSA compliance). Coordinate complex, multi-team release trains in alignment with Change Advisory Board (CAB) processes and ITIL Change Managem