Position Summary:
The Azure Cloud and CI/CD Subject Matter Expert owns the architecture, engineering, automation, security, governance, cost optimization, and operational maturity of Microsoft Azure environments and software delivery platforms. This hands-on role establishes cloud and Dev SecOps standards, builds reusable infrastructure and deployment patterns, and partners with application, security, finance, product, and operations teams to deliver secure, resilient, observable, and cost-effective services.
CRITICAL PRIORITY - AZURE COST SAVINGS: Continuously identify, quantify, prioritize, and deliver measurable Azure savings while protecting availability, security, performance, and business requirements.
Key Responsibilities
- Serve as the technical authority for Azure architecture, platform engineering, networking, identity, security, governance, resiliency, and operations.
- Design and implement landing zones, management-group and subscription structures, resource organization, naming, tagging, policy, and role-based access-control standards.
- Build and maintain CI/CD pipelines using Azure DevOps and/or GitHub Actions for application, database, container, and infrastructure deployments.
- Develop reusable Infrastructure as Code using Terraform and/or Bicep/ARM, with version control, peer review, automated validation, testing, and controlled promotion between environments.
- Implement secure pipeline practices including workload identity or service connections, secrets management, artifact integrity, dependency scanning, SAST, container scanning, approvals, and separation of duties.
- Architect Azure networking, including VNets, subnets, NSGs, routing, private endpoints, Private DNS, VPN/ExpressRoute, Application Gateway, WAF, Load Balancer, and Azure Firewall patterns.
- Design identity and privileged-access solutions using Microsoft Entra ID, managed identities, RBAC, Conditional Access, MFA, PIM, and least-privilege principles.
- Establish monitoring and observability through Azure Monitor, Log Analytics, Application Insights, alerts, dashboards, diagnostic settings, and actionable operational runbooks.
- Own Azure cost optimization and FinOps execution: establish budgets and alerts; analyze Cost Management, Advisor, utilization, and billing data; eliminate waste; right-size resources; schedule non-production workloads; optimize storage; and evaluate Reservations, Savings Plans, licensing, and architectural alternatives.
- Create a prioritized savings backlog with documented baselines, forecasts, owners, target dates, realized savings, avoided costs, and validation that changes do not introduce unacceptable operational or security risk.
- Lead technical reviews, troubleshoot complex deployment and cloud-platform issues, perform root-cause analysis, and drive durable corrective actions.
- Create architecture diagrams, pipeline standards, implementation guides, operational procedures, and evidence supporting security, compliance, and change management.
- Mentor engineers and collaborate with development, database, networking, security, quality, product, and vendor teams.
Required Qualifications
- Extensive hands-on experience architecting, implementing, securing, and operating enterprise Microsoft Azure environments.
- Expertise with Azure DevOps Pipelines and/or GitHub Actions, including YAML pipelines, templates, reusable workflows, environments, approvals, artifacts, variables, and release controls. Azure Cloud & CI/CD SME
- Confidential recruiting document JOB REQUISITION | CLOUD ENGINEERING & DEVOPS
- Strong Infrastructure as Code experience with Terraform and/or Bicep/ARM, including modules, remote state, dependency management, validation, and environment promotion.
- Deep knowledge of Azure networking, Microsoft Entra ID, RBAC, managed identities, Key Vault, Azure Policy, Defender for Cloud, and Azure Monitor.
- Experience with Azure compute and platform services such as Virtual Machines, App Service, Functions, AKS, Container Registry, Storage, SQL, and managed databases.
- Strong scripting and automation skills using PowerShell and Azure CLI; working knowledge of Bash, JSON, YAML, and REST APIs.
- Experience integrating security and quality controls into Git-based pipelines, including pull requests, code review, secret scanning, SAST, dependency/container scanning, policy gates, approvals, artifact versioning, rollback, and auditable deployment records.
- Ability to diagnose cross-platform problems and design for high availability, backup, disaster recovery, business continuity, scalability, performance, and cost optimization. • Demonstrated experience delivering measurable Azure savings using Cost Management, Azure Advisor, budgets, tagging, right-sizing, Reservations, Savings Plans, Hybrid Benefit, storage lifecycle controls, and workload scheduling.
- Excellent documentation, stakeholder communication, technical leadership, and mentoring skills.
Preferred Qualifications
- Seven or more years in infrastructure, cloud, platform engineering, or DevOps, including at least four years of substantial Azure experience.
- Microsoft Azure and/or HashiCorp Terraform certification, supported by advanced production experience.
- Experience in regulated healthcare or another environment handling PHI, PII, or sensitive data, with knowledge of HIPAA, SOC 2, ISO 27001, NIST, or CIS controls.
- Experience with Kubernetes/AKS, Docker, Helm, GitOps, service mesh, or container-platform security.
- Experience creating cloud-cost dashboards, forecasts, showback/chargeback reporting, unit-cost metrics, and executive savings reports.
- Experience supporting tenant or subscription migrations, Azure Enterprise Agreement/billing structures, and multi-subscription governance.