DevOps Engineer

Job Overview:

We’re looking for an infrastructure engineer who builds and ships. This is not a role for someone who hands off design documents or lives only in architecture diagrams. You’ll be writing Terraform, supporting production infrastructure, troubleshooting real issues, optimizing underperforming systems, and automating work so teams can move faster.

What makes this role different is how we work. AI is part of your daily toolkit. We’re not looking for someone who is merely “interested in” AI tools—you already know how to use them to accelerate real work. You understand how tools like Claude Code can dramatically reduce the time it takes to build infrastructure, write scripts, or troubleshoot problems, and you’re motivated to apply that speed in a production environment.

This is a hands-on engineering role. Expect to spend the majority of your time building and improving infrastructure, sometime designing and refining solutions with more senior engineers, and minimal time in meetings. If your goal is to move away from handson engineering or into a role focused primarily on diagramming and presentations, this likely isn’t the right fit.

Responsibilities:
Your day if you join us:
What You'll Build Embedded product support

Act as the dedicated Dev Ops engineer for your assigned product team, taking part in their planning, stand-ups and release cycles

Own the product's infrastructure, CI/CD pipelines and environments (dev, QA, staging, prod) from start to finish

Be the first escalation point for the product's production issues, deployments and environment requests

Bring central Dev Ops standards (Terraform modules, pipeline templates, security and compliance controls) into the product team, and feed the product team's needs back to Dev Ops Infrastructure  as Code at Scale Terraform modules for Azure Government and Commercial deployments—networking, compute, storage, identity, databases, monitoring AI-assisted Terraform module generation with automated testing, documentation, and compliance validation

State management patterns for multi-environment deployments (dev/QA/staging/prod) with proper isolation

Drift detection and remediation automation—catch what changed and fix it before it becomes an incident CI/CD with Git Hub Actions Git Hub  Actions workflows for infrastructure and application delivery: plan/apply gates, environment approvals and reusable workflowsOIDC federation from Git Hub to Azure, so pipelines don't need stored secrets

Branch protection and rulesets, with automated policy and security checks in the pipeline

Azure Networking & Hybrid Connectivity Hub-and-spoke architectures with proper segmentation for FedRAMP boundaries

Private Link configurations, DNS forwarding, and service endpoint strategies

Express

Route and VPN connectivity for hybrid scenarios

Azure Firewall and NSG policies with AI-assisted rule generation and audit

Identity and security

Azure RBAC, managed identities and PIM, with least-privilege access

Key Vault access models (RBAC and access policies) and secret rotation

Conditional Access and identity governance across multiple tenants

Automation & Scripting Power Shell  modules for Azure resource management, database operations, reporting, and remediation

Bash scripts for Linux workloads and CI/CD pipeline integration

Python utilities for API integrations, data processing, and custom toolingAI-assisted script generation with proper error handling, logging, and testing

Database support

Azure SQL and SQL Server operations: backups, maintenance automation and first-line performance troubleshooting

Zero- or minimal-downtime database migrations with automated rollback

Operational Excellence Azure Monitor, Log Analytics (KQL) and Application Insights Runbooks and automation for…