Senior DevOps Engineer, Video Intelligence

About the role

We are seeking a Senior DevOps Engineer to own the security, reliability, and delivery of our Azure platform and Kubernetes workloads supporting video intelligence solutions. You will design and operate secure‑by‑default infrastructure, automate everything‑as‑code, and partner with product teams to enable fast, safe code shipping.

Key responsibilities

• Build and evolve Azure Landing Zones, management group hierarchy, subscription vending, and policy‑as‑code guardrails.
• Design, deploy, and operate private AKS clusters with Azure CNI, Calico/Cilium, Pod Security Standards, network policies, and workload identity.
• Standardize CI/CD pipelines in GitHub Actions or Azure DevOps, enforce SBOM, image scanning, cosign signing, and GitOps deployments with Argo CD or Flux.
• Implement Entra ID RBAC, Managed Identities, Key Vault, Secrets Store CSI, and secret rotation practices.
• Establish observability with Azure Monitor, Log Analytics, tracing, SLOs, alerts, and integrate with Microsoft Sentinel.
• Drive cloud security posture using Defender for Cloud, vulnerability management, and automated remediation.
• Configure hub‑and‑spoke or vWAN networking, Private Link/Endpoints, Private DNS, firewall/NAT gateway, and encryption mechanisms.
• Implement backup, multi‑region DR, chaos testing, capacity planning, and codify DR runbooks.
• Support FinOps through tagging, budgeting, right‑sizing, and map controls to CIS/NIST/ISO standards.

Required profile

• 7+ years in DevOps/SRE/Platform Engineering with at least 3 years on Azure.
• 2+ years operating Kubernetes in production environments.
• Proven experience delivering Azure Landing Zones using Terraform or Bicep.
• Strong track record of building secure, automated pipelines and infrastructure.

Required skills

• Microsoft Azure (Landing Zones, Policy, Monitor, Sentinel, Defender for Cloud)
• Kubernetes and Azure Kubernetes Service (AKS)
• Infrastructure as Code: Terraform, Bicep
• CI/CD: GitHub Actions, Azure DevOps
• GitOps tools: Argo CD, Flux
• Container security: SBOM, image scanning, cosign, SLSA
• Network security: Calico, Cilium, Private Link, vWAN, firewall/NAT gateway
• Identity & secrets: Entra ID, OIDC, Managed Identities, Key Vault, Secrets Store CSI
• Observability: Azure Monitor, Log Analytics, tracing, alerts
• Backup & DR: Velero, multi‑region patterns
• FinOps: tagging, budgeting, reservations, compliance mapping