DevOps Engineer

• Infrastructure as Code. Author and maintain modular Terraform across isolated environments (separate Azure subscriptions and tenants for non-prod and production), with remote state, reusable modules, and a planreviewapply workflow.
• Kubernetes (AKS). Operate private AKS clusters with autoscaling, AAD-backed RBAC, workload identity, Azure Policy, and Defender. Manage per-customer cluster isolation and node-pool sizing.
• GitOps delivery. Own our ArgoCD setup (environment-per-branch), authoring Kustomize/Helm manifests and ApplicationSets, and defining a clean, documented promotion path from non-prod to production.
• Secrets & identity. Manage Azure Key Vault, External Secrets Operator, and workload-identity federation so no secret ever lives in git. Lead credential rotation and least-privilege cleanup.
• Observability & reliability. Own metrics, logs, and alerting (managed Prometheus, Grafana, Azure Log Analytics). Close gaps in production audit logging and alerting; define SLOs and on-call practices.
• Customer onboarding. Make standing up a new customer environment a templated, low-risk operation, and keep that automation honest as the fleet grows.
• CI/CD & developer experience. Maintain pipelines, pre-commit checks (terraform fmt/validate, security scanning), and the local development stack (docker-compose with service emulators).

• 3+ years in DevOps / SRE / Platform Engineering, with production ownership of cloud infrastructure.
• Strong Azure experience (subscriptions/tenants, RBAC, Key Vault, networking, managed identity).
• Deep Terraform skills - modules, remote state, multi-environment design, safe apply workflows.
• Hands-on Kubernetes in production (AKS preferred), including ingress, autoscaling, and RBAC.
• GitOps experience (ArgoCD or Flux) with Kustomize and/or Helm.
• Solid networking fundamentals (VNets, subnets, private endpoints, DNS, TLS) and a security-first mindset (secrets management, least privilege).
• Comfortable scripting and automating (Bash/Python) and working a Git-based PR workflow., * Bachelor's (Preferred)

Pulled from the full job description

• Health insurance
• Paid time off
• Vision insurance
• Dental insurance, * Infrastructure as code, reviewed via pull requests - no click-ops in production.
• GitOps for delivery; the cluster is the source of truth, the repo is the source of intent.
• Secrets come from Key Vault at runtime, never from git.
• We value clear documentation and runbooks, and we expect the platform to be operable by more than one person.

Join us to innovate at the intersection of software development and IT operations! Bring your expertise in automation tools, cloud platforms, scripting languages-and your passion for building resilient systems-to help us deliver top-tier enterprise solutions efficiently and securely!

Pay: From $100,000.00 per year

Benefits:

• Dental insurance
• Health insurance
• Paid time off
• Vision insurance