Lead DevOps Engineer

We are seeking an experienced Lead DevOps Engineer to spearhead the design, implementation, and delivery of an enterprise-wide automation platform.

In this role, you will lead the technical direction across Backstage developer portal capabilities, infrastructure automation, cloud (Azure & VMware) provisioning, security integration, and observability. The ideal candidate will combine hands-on technical expertise with leadership to drive Platform Engineering and self-service automation at enterprise scale.

Responsibilities

• Lead the design and implementation of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)
• Establish multi-tenancy models with org hierarchy and granular RBAC beyond basic authentication
• Integrate Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications
• Define golden path templates and self-service workflows for development teams
• Architect and deliver Infrastructure as Code using Terraform/OpenTofu and Configuration as Code using Ansible
• Implement GitOps workflows for continuous deployment and drift management
• Automate provisioning and management of Azure services: VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)
• Lead Kubernetes (AKS) provisioning, cluster management, and operational dashboards
• Build and maintain image factory pipelines for VM and container golden images

Requirements

• 5+ years of experience in DevOps, Platform Engineering, or related infrastructure roles
• At least 1 year of relevant leadership experience
• Expertise in Infrastructure as Code using Terraform / OpenTofu and Configuration as Code with Ansible
• Proficiency in Azure networking services, including VNets, Application Gateway, and WAF
• Background in Azure security and compute components such as Azure Firewall, NSGs, and Subnets/Route Tables
• Skills in Azure application platforms, including App Services, Container Apps, and Function Apps
• Knowledge of Azure database services: Azure SQL, Cosmos DB, and Azure Postgres
• Competency in containerization and orchestration with Kubernetes / AKS provisioning, cluster management, and Docker
• Capability to build operational dashboards for Kubernetes environments
• Qualifications in CI/CD pipeline automation and integration using Azure DevOps (ADO)
• Excellent command of written and spoken English (B2+ level)

Nice to have

• Familiarity with Backstage (developer portals, plugins, Scaffolder/TechDocs/Software Catalog/Search), self-service platform design, and multi-tenancy with granular RBAC models
• Understanding of GitOps tooling such as ArgoCD / Flux for continuous deployment and drift management
• Showcase of Identity & Access management with Entra ID, Active Directory (GPOs), and M365 groups/RBAC
• Skills in secrets management using Azure Key Vault, OpenBao / HashiCorp Vault, and dynamic secrets
• Proficiency in scripting and automation with Python, Bash, and PowerShell, including REST API integration
• Knowledge of networking automation (DNS, IPAM with NetBox) and observability tooling for monitoring, metrics, and logging
• Background in VMware virtualization (vSphere, vSAN, NSX-T) along with SRM/DRS and Azure VMware Solution (AVS) for hybrid workload management
• Expertise in image factory pipelines, Certificate Management with Venafi, and Policy as Code using OPA
• Familiarity with Privileged Access Management (PAM) break-the-glass integration and DevSecOps tooling (SAST, DAST, SCA/IAST/ASPM)
• Competency in security alerting (SIEM & WAF), firewalls (PaloAlto, F5, Cloudflare), and ITSM/CMDB integration with artifact repositories
• Capability to deliver vulnerability dashboards/reporting and automated Solution Design Document (SDD) generation