DevOps Engineer

Summary

Join our rapidly growing SaaS company as a highly motivated Azure Cloud Infrastructure DevOps Engineer. Build and support scalable, secure, and cost-effective cloud infrastructure for our SaaS products in the financial services industry. Our environment uses Azure IaaS and PaaS, Terraform, Ansible, and a cloud-native architecture. You will design, implement, and manage infrastructure, configure and manage Azure AD, support network architecture, and manage CI/CD pipelines. You will also implement monitoring, ensure high availability and disaster recovery, apply security best practices, and optimize infrastructure for cost efficiency. Collaborate with engineering, architecture, and product teams to deliver infrastructure solutions. This role requires strong Azure expertise and DevOps experience.

Requirements

• 3–5 years of experience in DevOps, cloud infrastructure, or platform engineering roles, preferably in a SaaS or financial technology environment
• Strong expertise with Microsoft Azure, including IaaS (VMs, VNets, NSGs) and PaaS (App Services, Azure SQL, Service Bus, etc.)
• Proven experience with Infrastructure as Code (Terraform) and Configuration as Code (Ansible)
• Experience with Microsoft Entra ID (Azure AD) for IAM, including RBAC, managed identities, and conditional access
• Solid understanding of networking fundamentals: DNS, TCP/IP, firewalls, load balancers, and VNet peering
• Hands-on experience with CI/CD pipelines and release automation using Azure DevOps
• Experience operating and monitoring production environments using New Relic, Azure Monitor, and Application Insights
• Strong problem-solving and troubleshooting skills across infrastructure, network, and platform layers
• A proactive, security-first, and cost-aware mindset with a track record of infrastructure optimization
• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience

Responsibilities

• Design, implement, and manage infrastructure using Terraform and Ansible for repeatable and scalable deployments
• Deploy and manage a wide range of Azure services including App Services, Azure SQL Elastic Pools, Virtual Machines, Service Bus, Key Vaults, and Recovery Services Vaults
• Configure and manage Microsoft Entra ID (Azure AD) for identity governance, role-based access control (RBAC), service principals, managed identities, and conditional access policies
• Support and evolve the stamp model topology and hub-and-spoke architecture to ensure secure, multi-region scalability
• Develop and maintain Azure DevOps pipelines to enable secure, reliable, and automated delivery workflows
• Implement and maintain monitoring using New Relic, Azure Monitor, and Application Insights. Build dashboards, define metrics (availability, latency, error rates), and configure alerts for proactive issue detection
• Ensure high availability, backup, and disaster recovery through tools like Azure Site Recovery, Recovery Services Vaults, and zone-/region-redundant configurations
• Apply cloud security best practices, manage secrets, and collaborate with security stakeholders to ensure regulatory alignment and secure platform design
• Continuously analyze resource usage and costs. Optimize infrastructure for performance and budget efficiency
• Work closely with engineering, architecture, and product teams to provide infrastructure solutions that support rapid and reliable software delivery
• Support and manage custom NGINX configurations to address load balancing, TLS termination, routing, and performance optimization

Preferred Qualifications

• Previous experience as a Microsoft SQL Server DBA or hands-on with Azure SQL operational support
• Familiarity with NGINX, Cloudflare, and enterprise firewalls (e.g., Cisco NGFW)
• Experience with multi-region Azure environments and disaster recovery planning and execution
• Scripting skills in PowerShell for automation of tasks and operational tooling
• Experience with Windows and Linux administration in a production cloud environment
• Knowledge of Azure Policy, Blueprints, or Microsoft Defender for Cloud
• Relevant Azure certifications such as AZ-104, AZ-400, or AZ-305 are a plus