Lead DevOps Engineer
We're looking for a skilled Lead DevOps Engineer to guide the development and delivery of a Unified Automation Platform. This person will drive technical strategy for the Backstage developer portal, infrastructure automation, cloud provisioning (Azure & VMware), security integration, and observability. The ideal candidate blends great technical skills with leadership abilities to advance Platform Engineering and enterprise-scale self-service automation.
Responsibilities
- Support the design and build-out of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)
- Build multi-tenancy structures with org hierarchy and detailed RBAC that go beyond basic authentication
- Connect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications
- Create golden path templates and self-service workflows for development teams
- Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible
- Set up GitOps workflows to manage continuous deployment and drift
- Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)
- Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards
- Develop and maintain image factory pipelines for VM and container golden images
Requirements
- Over 5 years of DevOps engineering experience, with strong skills in Terraform/OpenTofu and Ansible
- At least 1 year of leadership experience
- Solid understanding of Azure networking and security services, such as VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables
- Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps
- Strong knowledge of Azure databases, such as Azure SQL, Cosmos DB, and Azure Postgres
- Deep expertise in Kubernetes/AKS provisioning, cluster management, ops dashboards, and Docker
- Proven skills in Azure DevOps (ADO) pipeline automation and integration
- English proficiency at B2 level or above
Nice to have
- Experience with Backstage, including developer portals, plugins, Scaffolder, TechDocs, Software Catalog, and Search, plus self-service platform design and multi-tenancy/RBAC models
- Familiarity with GitOps tools like ArgoCD or Flux, along with continuous deployment and drift management
- Background in Identity & Access Management, covering Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, and RBAC
- Knowledge of Secrets Management tools such as Azure Key Vault, OpenBao/HashiCorp Vault, and dynamic secrets
- Scripting and automation skills in Python, Bash, PowerShell, and REST API integration
- Understanding of networking tools, including DNS automation and IPAM (NetBox)
- Awareness of observability practices, such as monitoring, metrics, logging, and basic tooling
- Experience with VMware virtualization, including vSphere, vSAN, NSX-T, SRM, and DRS
- Exposure to Azure VMware Solution (AVS) for hybrid/on-prem workload management
- Expertise in Image Factory pipelines for VM and container golden images
- Knowledge of Certificate Management tools like Venafi
- Experience implementing Policy as Code using OPA or similar policy engines
- Familiarity with Privileged Access Management (PAM), including break-the-glass integration
- Understanding of DevSecOps tooling, such as SAST, DAST, SCA, IAST, and ASPM integration
- Experience with Security Alerting through SIEM and WAF integrations
- Knowledge of firewall platforms like PaloAlto, F5, and Cloudflare
- Familiarity with ITSM/CMDB integration, including component request workflows and artifact repositories
- Experience with Vulnerability Management dashboards and reporting
- Skills in Documentation Automation, including generating Solution Design Documents (SDD)
Benefits
CONTINUOUS UPSKILLING, LEARNING & DEVELOPMENT
- Diversity of tasks and projects
- Assessment center for objective review of competency level
- Personal development plan
- Mentoring programs and leadership development
- Certification and professional development support
- Access to learning platforms including more than 2,500 internal courses
- English courses taught by certified teachers
CORPORATE BENEFITS
- Extra leave days
- Referral bonuses
COMPENSATION PACKAGE
- Competitive compensation paid in USD
- Regular salary and performance reviews
MEDICAL & HEALTHCARE
- Private health insurance
- Well-being events
WORKING ENVIRONMENT
- Recreation areas and kitchens
- Tea, coffee and snacks
- Sports equipment and game consoles
- IT Equipment
- Microsoft’s Software Assurance Home Use Program (HUP)
Skills
- Active Directory
- AKS
- Ansible
- API
- Argo CD
- Authentication
- Automation
- Azure
- Azure DevOps
- Bash
- CI/CD
- Cloud
- CMDB
- DAST
- DevOps
- DevSecOps
- DNS
- Docker
- Entra ID
- Firewall
- Flux
- GitOps
- Infrastructure as Code
- Kubernetes
- Networking
- Observability
- PostgreSQL
- PowerShell
- Python
- RBAC
- REST
- SAST
- Secrets Management
- SIEM
- Solution Design
- SQL
- Terraform
- Vault
- Virtualization
- VMware
- WAF