Description:
***Hybrid
***Web Cam Interview Only
We are seeking an experienced Azure DevOps Cloud Engineer to support enterprise infrastructure modernization initiatives. This role focuses on engineering secure, automated deployment pipelines, standardizing CI/CD workflows, establishing configuration baselines, and optimizing availability, reliability, and cost-efficiency across cloud workloads.
CI/CD Engineering & Release Automation:
• Design, build, and maintain enterprise CI/CD pipelines in Azure DevOps (YAML and Classic) for APIs and microservices.
• Establish reusable pipeline templates, release standards, and guardrails for compliant, repeatable deployments.
• Implement secure secrets and credential management using Azure Key Vault and Managed Identities within deployment workflows.
• Automate database deployment pipelines (e.g., DACPAC/SQLCMD) and embed database migration steps into standard release gates.
• Implement blue/green deployments and automated rollback strategies to minimize downtime and risk.
Environment Consistency & Observability:
• Standardize infrastructure configuration across Dev, QA, and Production environments; codify baseline configurations.
• Build dashboards, metrics, and actionable alerts for deployment of pipeline health and runtime diagnostics using Application Insights and Azure Monitor.
• Ensure deployment practices align with strict security and governance frameworks.
Azure Resource Engineering & Governance:
• Deploy, manage, and configure Azure services including App Services, Function Apps, API Management (APIM), and Azure Kubernetes Service (AKS).
• Enforce role-based access control (RBAC), Entra ID Single Sign-On (SSO), and least-privilege identity principles.
• Architect resilient, fault-tolerant cloud solutions and coordinate technical change control processes.
Production Support, Compliance & Cost Awareness:
• Perform root-cause analysis and incident triage for production issues using Log Analytics.
• Integrate compliance and data security practices (e.g., PCI DSS standards) into CI/CD workflows and audit logging.
• Monitor cloud consumption patterns, provide cost optimization recommendations, and align operations with budget parameters.
• Collaborate with enterprise architects, database administrators, and software development teams on secure system integration.
Qualifications
• Extensive hands-on experience building and administering CI/CD pipelines within Azure DevOps using both YAML and Classic editors.
• Proven background in Azure application deployment engineering across services such as App Services, Function Apps, Containerized apps, and API gateways.
• Demonstrated experience with Infrastructure as Code (IaC) using Terraform, Bicep, or ARM templates.
• Strong scripting and automation skills utilizing PowerShell and/or Python.
• Production experience integrating Azure Key Vault, Managed Identities, and RBAC into automation workflows.
• Experience integrating automated SQL/database deployments (DACPAC, SQLCMD) into release pipelines.
• Deep knowledge of logging, monitoring, and observability tools, including Azure Monitor, Application Insights, and Log Analytics.
Preferred Qualifications
• Experience designing CI/CD standards, pipeline guardrails, or governance frameworks for microservice architectures.
• Hands-on container orchestration experience with Docker and Azure Kubernetes Service (AKS), including container registry integrations.
• Experience implementing automated governance policies using Azure Policy.
• Familiarity with PCI DSS or comparable enterprise compliance frameworks.
• Active Microsoft Azure certifications (e.g., AZ-104, AZ-400, or AZ-305).
Additional Requirements
• Must be able to pass a comprehensive fingerprint-based background check prior to onboarding.
• Location: Mechanicsville, VA (Hybrid)
• Position Type: Contract (Long-term)
• Work Arrangement: Hybrid | Web Cam Interview Only
Required / Desired Skills
- Azure DevOps CI/CD (YAML & Classic) (Required 4 Years)
- Azure App Services / Functions / APIs / Containers (Required 3 Years)
- Secure Secrets & Key Management (Key Vault, RBAC, managed identities) (Required 3 Years)
- SQL Deployment Automation (DACPAC, SQLCMD, CI/CD-integrated DB migrations) (Required 1 Years)
- Environment Provisioning & Configuration (Dev/QA/Prod standardization) (Required 3 Years)
- Logging & Observability (App Insights, pipeline logs, dashboards, alerts) (Required 3 Years)
- Infrastructure as Code (Terraform/Bicep/ARM) (Required 2 Years)
- Governance & Compliance Automation (Azure Policy, RBAC, pipeline guardrails) (Desired 1 Years)
- Identity & Access (Entra ID), least-privilege IAM (Required 1 Years)
- AKS / Containerization (Docker, Kubernetes) (Desired 1 Years)
- PCI or similar compliance frameworks (Required 1 Years)
- Cloud Cost Analysis & Optimization (Desired 1 Years)