Senior Devops Engineer

The Senior Dev Ops Engineer is responsible for designing, deploying, automating, securing, and operating NEMS cloud infrastructure in Microsoft Azure. This is an infrastructure-focused Dev Ops role for an engineer with a strong enterprise networking foundation who can translate architecture and security requirements into repeatable Infrastructure as Code (IaC), deployment pipelines, policy controls, and operational runbooks.

The role builds and maintains Azure landing zones, management group and subscription structures, resource groups, network security groups, routing, connectivity, identity and policy guardrails, monitoring, and shared platform services across hybrid environments. Working closely with Systems, Network, Security, Application, and vendor teams, the engineer helps NEMS deliver secure, resilient, auditable, and HIPAA-aligned cloud services while reducing manual configuration and deployment risk.

ESSENTIAL JOB FUNCTIONS:

Designs, implements, and maintains Azure landing zones using Microsoft Cloud Adoption Framework and Azure Well-Architected principles, including management groups, subscriptions, resource groups, naming standards, tagging, policy assignments, budgets, and centralized logging.

Develops and maintains reusable Infrastructure as Code modules using Terraform and/or Bicep for Azure networking, security, compute, storage, monitoring, identity integration, and shared platform services.

Builds and operates CI/CD pipelines in Azure Dev Ops and/or Git Hub Actions to validate, plan, approve, deploy, and roll back infrastructure changes across development, test, disaster recovery, and production environments.

Implements code review, branch protection, version control, state management, drift detection, automated testing, documentation, and release controls for infrastructure repositories.

Designs and automates resource groups, virtual networks, subnets, network security groups, application security groups, route tables, Azure Firewall policies, private endpoints, Private DNS zones, load balancers, and application gateways.

Designs and troubleshoots hybrid connectivity using Express Route, site-to-site VPN, BGP, hub-and spoke and/or Azure Virtual WAN architectures, ensuring secure routing, segmentation, resiliency, and predictable failover.

Applies network engineering fundamentals including TCP/IP, DNS, DHCP, BGP, NAT, routing, firewall policy, TLS, proxy, packet capture, traffic-flow analysis, and root cause analysis to Azure infrastructure issues.

Implements Azure Policy initiatives, RBAC, managed identities, service principals, privileged access controls, secrets management, and least-privilege deployment patterns in coordination with the Security team.

Embeds security checks into infrastructure pipelines, including IaC scanning, secrets detection, policy validation, configuration compliance, and controlled exception handling.

Configures Azure Monitor, Log Analytics, Network Watcher, alerts, dashboards, diagnostic settings, and activity-log retention to improve visibility, incident response, capacity planning, and audit readiness.

Supports Azure migration and modernization activities through discovery, dependency mapping, network readiness, landing-zone onboarding, workload placement, cutover planning, validation, and post-migration stabilization.

Designs infrastructure for availability, backup, disaster recovery, and regional resilience based on approved recovery time and recovery point objectives; participate in failover and recovery testing.

Automates recurring operational tasks using Power Shell, Azure CLI, Python, REST APIs, and configuration-management tools where appropriate.

Maintains current architecture diagrams, module documentation, pipeline standards, operating…