Cloud Infrastructure & DevOps Engineer

We are seeking a Cloud Infrastructure & DevOps Engineer with at least three years of practical experience to support and manage enterprise cloud platforms hosted on Microsoft Azure. This role centers on cloud administration and operations, focusing on maintaining, monitoring, and supporting existing cloud environments rather than designing new components. The ideal candidate will have strong skills in Terraform-based infrastructure management, GitHub Enterprise Server administration, CI/CD pipeline operations, cloud networking, identity management, monitoring, and release execution.

Key Responsibilities

- Administer the Citadel Platform and AI Application Landing Zones by managing Azure subscriptions, resource groups, networking, identity, RBAC, policies, Key Vault/secrets, monitoring, and cost controls.
- Own and maintain Terraform-based Infrastructure as Code, including modules, providers, variables, state/backends, workspaces, plan/apply workflows, drift detection, and remediation.
- Operate CI/CD pipelines on GitHub Enterprise Server (GHES), managing workflows and self-hosted runners, and support Azure DevOps integration where applicable.
- Ensure all infrastructure and configuration changes are version-controlled and deployed through approved CI/CD processes, strictly avoiding manual changes via portals.
- Monitor platform health, availability, capacity, security alerts, and integration failures; assist with incident triage, root cause analysis, and tracking recurring problems.
- Execute controlled releases, verify deployments, and perform rollback procedures in line with established change-management processes.
- Troubleshoot issues related to network, identity, API, data access, and connectivity across Azure, Google Cloud Platform, and on-premise systems.
- Maintain operational runbooks, deployment checklists, configuration and environment inventories, and handover documentation; conduct knowledge transfer sessions to ensure smooth operations.

Required Qualifications

- Minimum of three years of hands-on experience in Microsoft Azure administration and operations within enterprise environments.
- Strong expertise in Terraform and Infrastructure as Code (IaC), including module design, state/backend management, plan/apply workflows, and drift remediation.
- Proficient with GitHub Enterprise Server (GHES), GitHub Actions, self-hosted runners, and CI/CD pipeline management.
- Deep understanding of Azure services, subscriptions, resource groups, landing zones, and networking components such as VNETs, DNS, routing, load balancers, and firewalls.
- Knowledgeable in Identity and Access Management (IAM), Role-Based Access Control (RBAC), policy management, and secrets management.
- Experience with monitoring, logging, and alerting tools.
- Scripting skills in PowerShell, Bash, or Python.
- Proven ability in release execution, deployment support, rollback activities, and operational troubleshooting.
- Familiarity with API management, REST APIs, event streaming, and cross-cloud/on-premise connectivity.

Preferred Qualifications and Benefits

- Experience with container technologies such as Docker, Kubernetes, or OpenShift.
- Exposure to DevSecOps practices, security scanning, and policy-as-code frameworks.
- Knowledge of Azure Landing Zones and cloud governance frameworks.
- Familiarity with monitoring and analytics tools like Azure Monitor, Log Analytics, Prometheus, Grafana, or ELK/OpenSearch.
- Experience with Terraform Cloud/Enterprise.
- Understanding of IT Service Management (ITSM) processes and tools such as ServiceNow.
- Background working in regulated or enterprise environments.
- Knowledge of backup, disaster recovery, and high-availability solutions.

Preferred Certifications

- Strongly preferred: Microsoft Azure Administrator Associate (AZ-104).
- Additional valuable certifications include Azure DevOps Engineer Expert (AZ-400), HashiCorp Terraform Associate, GitHub Actions certification, Azure Security Engineer Associate (AZ-500), and Identity and Access Administrator (SC-300).
- Google Cloud Associate Cloud Engineer certification is considered an advantage.

Key Deliverables

- Comprehensive operational runbooks.
- Environment and configuration inventories.
- Monitoring and incident registers.
- Up-to-date Infrastructure as Code and CI/CD repositories.
- Deployment and rollback procedures.
- Knowledge-transfer and handover documentation.

This position offers the opportunity to work in a fast-paced environment supporting critical cloud infrastructure, with a strong emphasis on operational excellence and continuous improvement.