Lead DevOps Engineer (Azure)

Key responsibilities & Accountabilities

·       Build and manage scalable Azure cloud platforms using Terraform, Crossplane, AKS, Azure Container Apps, GitOps, Backstage, and shared DevOps pipelines.

·       Develop reusable code, libraries, and templates in C# and Python to streamline developer workflows and enable self service automation.

·       Embed security into pipelines through SAST/DAST, enforce Azure governance policies, manage secrets, and automate end to end security scanning.

·       Implement SRE principles—SLOs/SLIs, monitoring, alerting, dashboards, postmortems, and automation—to ensure reliable, observable platform operations.

·       Drive cloud cost efficiency through tagging, budget alerts, anomaly detection, and automated rightsizing.

·       Collaborate with teams, resolve incidents, maintain documentation, and deliver autonomous, high quality operational support.

Skills & Ability

·       Azure Expertise (2+ years of enterprise azure experience is mandatory)

·       Skilled in Azure services including AKS, Azure Container Apps, VNets, ACR, Key Vault, Entra ID, Azure Policy, Defender for Cloud, Azure Monitor, Application Insights, Log Analytics, Azure SQL, Cosmos DB, and Storage Accounts.

·       Experienced in Kubernetes (deployments, StatefulSets, RBAC, network policies), Helm, Docker, image scanning/signing, Pod Security Standards, and admission controllers.

·       Proficient with ArgoCD (App of Apps, ApplicationSets, Rollouts), Azure DevOps YAML pipelines, Azure Boards, semantic versioning, conventional commits, and trunk based development.

·       Strong hands on experience with Terraform (modules, state), Crossplane (XRDs, Compositions, Claims), and declarative desired state configuration.

·       Advanced use of Azure CLI, PowerShell, Bash, along with kubectl, helm, terraform, git, argocd, docker for platform automation and operations.

·       Proficient with Snyk, SonarQube, Azure Key Vault, workload identity, container image security, and CI/CD integrated vulnerability scanning.

·       Experienced with Azure SQL, PostgreSQL, Cosmos DB, schema design, migrations, secure connectivity using private endpoints, and network level protections.

·       Hands on Experience with backstage or other developer portals, along with .NET and/or Python development is an added advantage.