DevOps Engineer

Job Overview

We run a multi-tenant data platform on Azure and Kubernetes, and we're hiring a DevOps Engineer to own the infrastructure end to end — from Terraform and AKS through GitOps delivery, networking, secrets, and the data-pipeline plumbing our product is built on. This is a high-ownership role: you'll be the person the engineering teams rely on to keep dev and production healthy, to onboard new customers safely, and to raise the bar on security, observability, and repeatability.

You'll inherit a real, working platform with established patterns (modular Terraform, branch-based GitOps, workload-identity secrets) and a backlog of hardening work — improving production observability, tightening credential management, and reducing configuration drift between environments. If you like taking ownership of a system, paying down operational risk, and making "promote from dev to prod" a boring, repeatable process, this is for you.

Duties

• Infrastructure as Code. Author and maintain modular Terraform across isolated environments (separate Azure subscriptions and tenants for non-prod and production), with remote state, reusable modules, and a plan→review→apply workflow.
• Kubernetes (AKS). Operate private AKS clusters with autoscaling, AAD-backed RBAC, workload identity, Azure Policy, and Defender. Manage per-customer cluster isolation and node-pool sizing.
• GitOps delivery. Own our ArgoCD setup (environment-per-branch), authoring Kustomize/Helm manifests and ApplicationSets, and defining a clean, documented promotion path from non-prod to production.
• Secrets & identity. Manage Azure Key Vault, External Secrets Operator, and workload-identity federation so no secret ever lives in git. Lead credential rotation and least-privilege cleanup.
• Observability & reliability. Own metrics, logs, and alerting (managed Prometheus, Grafana, Azure Log Analytics). Close gaps in production audit logging and alerting; define SLOs and on-call practices.
• Customer onboarding. Make standing up a new customer environment a templated, low-risk operation, and keep that automation honest as the fleet grows.
• CI/CD & developer experience. Maintain pipelines, pre-commit checks (terraform fmt/validate, security scanning), and the local development stack (docker-compose with service emulators).

Experience

• 3+ years in DevOps / SRE / Platform Engineering, with production ownership of cloud infrastructure.
• Strong Azure experience (subscriptions/tenants, RBAC, Key Vault, networking, managed identity).
• Deep Terraform skills — modules, remote state, multi-environment design, safe apply workflows.
• Hands-on Kubernetes in production (AKS preferred), including ingress, autoscaling, and RBAC.
• GitOps experience (ArgoCD or Flux) with Kustomize and/or Helm.
• Solid networking fundamentals (VNets, subnets, private endpoints, DNS, TLS) and a security-first mindset (secrets management, least privilege).
• Comfortable scripting and automating (Bash/Python) and working a Git-based PR workflow.

How we work

• Infrastructure as code, reviewed via pull requests — no click-ops in production.
• GitOps for delivery; the cluster is the source of truth, the repo is the source of intent.
• Secrets come from Key Vault at runtime, never from git.
• We value clear documentation and runbooks, and we expect the platform to be operable by more than one person.

Join us to innovate at the intersection of software development and IT operations! Bring your expertise in automation tools, cloud platforms, scripting languages—and your passion for building resilient systems—to help us deliver top-tier enterprise solutions efficiently and securely!

Pay: From $100,000.00 per year

Benefits

• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Education

* Bachelor's (Preferred)

Location

* Remote (Preferred)

Shift availability

* Day Shift (Required)

Work Location: Remote