Devops Engineer

Remote- 75 rate- National grid

Key Responsibilities:

• Design and implement Azure landing zones using hub-and-spoke architecture, ensuring secure segmentation, governance, and scalable network topology.
• Build and maintain infrastructure as code with Terraform, including reusable modules, workspaces, remote state, and policy enforcement.
• Create and manage CI/CD pipelines with GitHub Actions (or equivalent), including build, test, security scanning, artifact management, and environment promotions.
• Architect, deploy, and operate AKS clusters and supporting services; implement secure-by-default configurations, autoscaling, and resilient workloads.
• Containerize and optimize applications using Docker; reduce large image sizes via multi-stage builds, minimal base images, layer/caching optimization, and artifact slimming.
• Diagnose and resolve production issues across the stack (infrastructure, networking, containers, applications), including on-call participation as needed.
• Implement and manage Azure Storage accounts with RBAC, ensuring least-privilege access, secure endpoints, and proper data lifecycle configurations.
• Apply Azure security best practices across subscriptions, resource groups, and services; support governance, identity/access, secrets management, and compliance controls.
• Deploy and operate Azure App Service and App Service Plans; automate blue/green or canary deployments, slot management, and configuration/secrets handling.
• Collaborate with development, security, and operations teams to establish guardrails, observability, and continuous improvement of platform reliability and performance.
• Produce clear documentation, runbooks, and diagrams; mentor team members in DevOps and cloud best practices.

Required Skills and Experience:

• Strong hands-on experience implementing Azure hub-and-spoke architectures (VNets, peering, firewalls, routing, private endpoints, and landing zone patterns).
• Expert in Terraform for Azure (providers, modules, remote state, state management, CI integration, and policy as code).
• Proficient with Git-based CI/CD, specifically GitHub Actions (workflows, reusable actions, environments, secrets, OIDC federation, and approvals).
• Deep understanding of the Linux file system and internals relevant to operations (permissions, ACLs, namespaces, cgroups, storage drivers, filesystems, and performance troubleshooting).
• Production experience with Docker and AKS, including security hardening (network policies, PodSecurity standards, secrets, images), scaling strategies, and debugging.
• Proven ability to refactor large Docker images to be performant and maintainable (multi-stage builds, slimming dependencies, caching strategy, scanning and provenance).
• Strong Azure Storage account expertise, including RBAC, IAM integration, network isolation, encryption, and lifecycle/replication configurations.
• Solid grounding in Azure security concepts: identity and access management, role design, managed identities, Key Vault usage, network security, monitoring/alerting, and policy governance.
• Experience deploying and operating applications on Azure App Service and App Service Plans, including pipelines, deployment slots, app settings, and secure configuration.
• Strong troubleshooting skills for production incidents across compute, networking, and application layers; adept with logs, metrics, and tracing.
• Proficiency with scripting/automation (e.g., Bash, PowerShell) and use of Azure CLI and/or Azure PowerShell.