DevOps Engineer

We’re looking for an infrastructure engineer who builds and ships. This is not a role for someone who hands off design documents or lives only in architecture diagrams. You’ll be writing Terraform, supporting production infrastructure, troubleshooting real issues, optimizing underperforming systems, and automating work so teams can move faster.

What makes this role different is how we work. AI is part of your daily toolkit. We’re not looking for someone who is merely “interested in” AI tools—you already know how to use them to accelerate real work. You understand how tools like Claude Code can dramatically reduce the time it takes to build infrastructure, write scripts, or troubleshoot problems, and you’re motivated to apply that speed in a production environment.

This is a hands‑on engineering role. Expect to spend the majority of your time building and improving infrastructure, sometime designing and refining solutions with more senior engineers, and minimal time in meetings. If your goal is to move away from hands‑on engineering or into a role focused primarily on diagramming and presentations, this likely isn’t the right fit.

What You'll Build

Embedded product support

• Act as the dedicated Dev Ops engineer for your assigned product team, taking part in their planning, stand‑ups and release cycles
• Own the product's infrastructure, CI/CD pipelines and environments (dev, QA, staging, prod) from start to finish
• Be the first escalation point for the product's production issues, deployments and environment requests
• Bring central Dev Ops standards (Terraform modules, pipeline templates, security and compliance controls) into the product team, and feed the product team's needs back to Dev Ops

• Terraform modules for Azure Government and Commercial deployments—networking, compute, storage, identity, databases, monitoring
• AI-assisted Terraform module generation with automated testing, documentation, and compliance validation
• State management patterns for multi-environment deployments (dev/QA/staging/prod) with proper isolation
• Drift detection and remediation automation—catch what changed and fix it before it becomes an incident

CI/CD with Git Hub Actions

• Git Hub Actions workflows for infrastructure and application delivery: plan/apply gates, environment approvals and reusable workflows
• OIDC federation from Git Hub to Azure, so pipelines don't need stored secrets
• Branch protection and rulesets, with automated policy and security checks in the pipeline
• Hub-and-spoke architectures with proper segmentation for FedRAMP boundaries
• Private Link configurations, DNS forwarding, and service endpoint strategies
• Express Route and VPN connectivity for hybrid scenarios
• Azure Firewall and NSG policies with AI-assisted rule generation and audit

Identity and security

• Azure RBAC, managed identities and PIM, with least-privilege access
• Key Vault access models (RBAC and access policies) and secret rotation
• Conditional Access and identity governance across multiple tenants

• Power Shell modules for Azure resource management, database operations, reporting, and remediation
• Bash scripts for Linux workloads and CI/CD pipeline integration
• Python utilities for API integrations, data processing, and custom tooling
• AI-assisted script generation with proper error handling, logging, and testing

Database support

• Azure SQL and SQL Server operations: backups, maintenance automation and first-line performance troubleshooting
• Zero- or minimal-downtime database migrations with automated rollback

Operational Excellence

• Azure Monitor, Log Analytics (KQL) and Application Insights
• Runbooks and automation for common fixes

• Cost optimization: reserved instances, right-sizing and cleaning up orphaned resources
• Taking…