Senior Infrastructure Engineer - Azure AKS/App Infra
Summary
Senior Infrastructure Engineer owning the application layer of a client's Azure environment in a regulated banking domain: operating AKS and Azure App Service workloads, CI/CD pipelines, monitoring, integrations, and vulnerability remediation. Fully remote across the Americas with full U.S. business-hours overlap.
#### About Lumenalta
At Lumenalta, we partner with forward-thinking organizations to build technology solutions that scale, delight users, and accelerate business growth. Our global teams bring curiosity, commitment, and technical excellence to every project. We value transparency, autonomy, and impact, empowering every team member to do their best work.
#### About the Role
We are looking for a Senior Infrastructure Engineer to own the application layer of an Azure environment for a client in a regulated banking domain. In this role you will deploy, operate, and troubleshoot containerized workloads on Azure Kubernetes Service (AKS) and Azure App Service, own CI/CD and monitoring for production applications, own the connectivity between applications and the systems they depend on, and help keep the environment secure, reliable, and well documented.
#### What You'll Be Doing
- **AKS in production.** Manage deployments, node pools, ingress, and service discovery, and debug unhealthy workloads, failing pods, and pod-to-service connectivity until the root cause is found and fixed.
- **Application layer ownership.** Understand and operate how each application is packaged, deployed, configured, and run across AKS and Azure App Service, including runtimes, dependencies, configuration, and secrets in Azure Key Vault.
- **Integration connectivity.** Own the plumbing between systems: API integrations, file transfers between environments (SFTP, blob storage), inter-instance connectivity, managed identities, and API exposure through Azure API Management.
- **CI/CD and release operations.** Maintain and improve the continuous integration and continuous delivery pipelines that build and ship applications, making deployments repeatable, observable, and safe to roll back.
- **Monitoring and alerting.** Put meaningful monitoring and alerting in place for everything running on the platform, using Azure Monitor, Log Analytics, and Application Insights.
- **Code and environment vulnerability management.** Close out container and application layer findings from scanners and penetration tests by rebuilding base images, upgrading dependencies, fixing configurations, and tracking exceptions until each item is resolved.
- **Network collaboration.** Work with networking teams to define what each application needs from the network, including VNets, private endpoints, and NSGs (network security groups).
- **Documentation.** Write and maintain runbooks covering deployments, recovery steps, and known issues.
#### What We're Looking For
- 7+ years of experience in infrastructure or operations, with at least 3 years hands-on in Azure.
- Production AKS experience, including deployments, ingress controllers, service discovery, and troubleshooting unhealthy workloads and pod-to-service connectivity.
- Deep application layer knowledge: containers, Kubernetes, App Services, runtimes, dependencies, configuration, and secrets management.
- Experience owning integration connectivity between systems: APIs, file transfers, managed identities, and service-to-service networking in Azure.
- Hands-on experience running CI/CD pipelines (Azure DevOps Pipelines or GitHub Actions) and building monitoring and alerting for production workloads.
- Experience owning vulnerability remediation across the container and application layers, from finding to closure.
- Working knowledge of Azure networking, including VNets, private endpoints, and NSGs.
- Strong documentation habits, including writing and maintaining runbooks.
- A strong sense of ownership and the ability to work independently, taking problems from investigation to resolution.
- Advanced English and the ability to communicate technical issues clearly to engineers and client stakeholders in a distributed, remote team.
#### Nice to Have
- Experience with Helm and GitOps tooling such as Argo CD or Flux.
- Infrastructure as code with Terraform or Bicep.
- Operational familiarity with Azure Data Factory (reading failed runs, fixing triggers, linked services, and credentials).
- Experience in banking, financial services, or other regulated environments.
- Consulting or client-facing delivery experience.
- Certifications such as CKA, CKAD, AZ-104, or AZ-400.
#### Why Lumenalta is an amazing place to work
At Lumenalta, you can expect that you will:
- Be 100% dedicated to one project at a time so that you can innovate and grow.
- Be a part of a team of talented and friendly senior-level engineers.
- Work on projects that allow you to use leading tech.
#### Location
This is a fully remote position open to candidates based anywhere in the Americas, including the United States and Canada. Candidates must be able to work with full overlap with U.S. business hours to ensure effective collaboration with client and team schedules.
#### Application Deadline
Applications will be accepted until **November 6, 2026**. Candidates can expect feedback by **November 10, 2026**.
