Senior DevOps Specialist

Senior DevOps SpecialistLocation: Deerfield, IL (ONSITE)FULLTIME ONLYJob DescriptionMust Have Technical/Functional Skills• 5+ years of DevOps, platform engineering, or build/release engineering experience in large enterprise environments.• 3+ years of deep, hands-on experience with Azure DevOps and/or GitHub Enterprise in an enterprise multi-team context.• Expert-level proficiency in infrastructure-as-code: Terraform required; Bicep strongly preferred.• Strong experience with containerization and AKS: Helm chart development, Kustomize, namespace management, and workload identity.• Proficiency in scripting: PowerShell and/or Python; experience with Azure CLI and REST APIs.• Proven experience implementing DevSecOps toolchains in regulated enterprise environments.• Working knowledge of enterprise Azure networking as it pertains to deployment pipelines:• Private Endpoints, self-hosted agents in VNets, ExpressRoute-connected environmentsRequired/Preferred Certifications:AZ-400 (Highly Desirable) | AZ-104 | AZ-305 | CKA (Beneficial) | GitHub Actions CertificationRoles & Responsibilities CI/CD Pipeline Engineering• Design, build, and operate enterprise CI/CD pipelines using Azure DevOps Pipelines (YAML-based, multi-stage) and GitHub Actions, supporting 50+ development teams across the organization.• Implement and enforce DevSecOps gates: SAST/DAST scanning (Microsoft Defender for DevOps, Snyk), dependency auditing, secrets detection, and container image scanning via Microsoft Defender for Containers.• Develop reusable pipeline templates, task groups, and shared library components to standardize delivery across all Azure DevOps organizations.• Champion shift-left quality practices: automated unit/integration/performance testing integrated into deployment pipelines with quality gatesInfrastructure Automation & Cloud Engineering• Own and extend the organization’s Azure infrastructure-as-code estate using Terraform and Bicep; manage state backends in Azure Storage with Terraform Cloud/Atlantis.• Design and maintain Azure Landing Zone configurations including Management Group hierarchy, Azure Policy initiatives, RBAC assignments, and Subscription vending automation.• Automate provisioning and lifecycle management of Azure PaaS services: AKS, Azure SQL, Azure Service Bus Storage Accounts, Key Vault, and App Services.• Integrate infrastructure pipelines with enterprise CMDB (ServiceNow) for automated asset registration and compliance reporting.Release Management & GitOps• Define and govern enterprise release management processes, branching strategies (trunk-based development), and GitOps workflows using ArgoCD or Flux on AKS.• Manage Azure Artifacts feeds for NuGet, npm, Maven, and container image artefacts across the enterprise; implement retention and promotion policies.Platform Reliability & Operational Excellence• Define and monitor DevOps DORA metrics (Deployment Frequency, Lead Time, MTTR, and Change Failure Rate) and publish dashboards to engineering leadership.• Collaborate with the SRE team to implement progressive delivery patterns: blue/green deployments, canary releases, and feature flag management using Azure App Configuration.• Manage Azure cost efficiency for CI/CD infrastructure: Microsoft-hosted and self-hosted agent pools, ephemeral build agents, and pipeline optimization for build minutes.Governance, Security & Compliance• Ensure all pipelines and infrastructure comply with enterprise security standards, including CIS Benchmarks for Azure, Microsoft Cloud Security Benchmark (MCSB), and internal control frameworks.• Maintain pipeline audit trails and artefact provenance in alignment with SOC 2, ISO 2700 1, and regulatory requirements.