> Markdown version of [/jobs/ext/4607539-devops-azure-lead](https://www.wearedevelopers.com/jobs/ext/4607539-devops-azure-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# DevOps & Azure Lead

- **Company:** STAND 8
- **Location:** Jacksonville, FL, United States
- **Experience:** Expert
- **Salary:** $130,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Microsoft Windows, Active Directory, Apache Tomcat, Microsoft Azure, Ubuntu (Operating System), Continuous Integration, IBM DB2, DevOps, Disaster Recovery, Domain Name System (DNS), Icinga, Virtual Private Networks (VPN), Network Security, Linux System Administration, Linux Servers, Peering, Pentaho Data Integration, Role-Based Access Control, Markdown, Ansible, Software Engineering, Software Vulnerability Management, Backup and Restore, Spring-boot, Git, Gitlab-ci, Terraform, Atlassian Bamboo, Key Vault, Artifactory, Vmware
- **Published:** November 6, 2026
- **Apply:** https://www.adzuna.com/details/5954962306

## About the Role

5+ years running production infrastructure, with at least 3 years on Microsoft Azure.
Terraform in a real multi-environment codebase: modules, remote state, plan review, and safe refactors with moved blocks.
Ansible roles and playbooks for configuring Linux servers at scale.
Strong Linux administration on Ubuntu: Systemd, networking, storage, NFS, troubleshooting.
Azure networking: hub-and-spoke VNets, peering, NSGs, NAT gateway, private DNS and private endpoints, VPN.
Azure identity: Entra ID, RBAC, managed identities, service principals, and group-based access.
CI/CD pipelines (Azure Pipelines or GitLab CI) and an artifact repository such as Artifactory.
Monitoring and alerting design, and calm, methodical incident response.
At least 2 years leading or mentoring engineers, including setting priorities and giving feedback.
Clear written runbooks and change records. Our procedures live as Markdown in Git.
Preferred (Optional):

IBM Db2 administration, especially HADR, backup and restore, and encryption.
Running Java application servers (TomEE, Tomcat) and Spring Boot in production.
Hands-on SOC 2, ISO 27001 or similar audit experience: control evidence, policies, risk registers.
Microsoft 365 and Exchange Online administration, and hybrid Active Directory to Entra ID migrations.
Microsoft Defender, Purview, and vulnerability management with OpenVAS or similar.
Power BI gateway and Pentaho operations.

## Description

This hands-on DevOps and Azure Lead will be the primary engineer for Azure infrastructure-as-code and lead a two-person IT team. The role owns the Terraform and Ansible codebase supporting production and disaster recovery across East US and West US 2, plus dev, QA, demo, and stage environments, and is responsible for day-to-day CI/CD, monitoring, patching, security, and cloud cost management. Production workloads moved from on-premises VMware to Azure in October 2026, and the platform is defined in code. The platform owner sets architecture and direction while this role drives safe implementation, operational reliability, and continuous improvement., Be the primary developer and maintainer of the Terraform and Ansible codebase that defines every environment.
Design and write changes, review others' changes, and keep production changes safe once live.
Run and improve CI/CD in Azure Pipelines and GitLab CI: application builds, Artifactory, and one-click deploys to dev, QA and stage.
Support the application development team's pipelines: onboard new projects, write and fix build and deploy definitions, manage service connections and agents, and unblock failed builds quickly.
Operate production and its disaster-recovery copy: Db2 HADR clusters, backups to the opposite region, and failover runbooks that get tested.
Own monitoring and alerting with Azure Monitor and Icinga. Tune alerts so on-call pages mean something.
Run monthly OS patching across the Ubuntu fleet, with Db2 primaries restarted in order inside a maintenance window.
Keep network security tight: NSGs that deny by default, Application Gateway WAF, point-to-site VPN with Entra sign-in, and Key Vault.
Manage cloud cost: right-size VMs, keep the pre-production start/stop schedule, and explain spend per environment.
Keep the runbooks in docs/ current. When a step fails and the cause is found, write it down.