Job Description

Roles & Responsibilities

1. Azure DevOps Platform Ownership

Azure Repos

• Design and maintain Git repository strategies (mono-repo vs. multi-repo) aligned with team and product needs
• Enforce branching strategies (GitFlow / trunk-based), pull request policies, and code review standards
• Configure repository security including branch protections, reviewer rules, and access controls
• Support teams in resolving merge conflicts, history rewrites, and repo optimizations
• Ensure compliance with organizational coding and audit standards

Azure Boards

• Collaborate with product owners and Scrum Masters to manage backlogs, epics, features, and user stories
• Define and maintain work item templates, queries, dashboards, and delivery metrics
• Enable traceability between requirements code pipelines deployments
• Drive Agile best practices (Scrum / Kanban) within DevOps workflows

Azure Pipelines

• Design, implement, and maintain CI/CD pipelines using YAML
• Build reusable pipeline templates for multi environment deployments (Dev / Test / Prod)
• Integrate pipelines with:
• Azure Repos / GitHub
• AKS
• Security scanning tools (Wiz, Fortify)
• Implement pipeline optimizations (parallel jobs, caching, artifact reuse)
• Troubleshoot pipeline failures and performance bottlenecks
• Enforce release gates, approvals, and environment specific validation

2. Azure Cloud Engineering (AZ 900 / AZ 104 Level & Above)

Azure Kubernetes Service (AKS)

• Design, deploy, and manage production grade AKS clusters
• Configure node pools, autoscaling, upgrades, and security
• Manage workloads using Kubernetes best practices (requests/limits, probes, HPA)
• Integrate AKS with Azure networking, monitoring, and identity
• Perform cluster troubleshooting, performance tuning, and incident resolution

Azure Networking

• Design and manage:
• VNets
• Subnets
• NSGs
• Private Endpoints / Service Endpoints
• Implement secure connectivity for AKS, databases, and application services
• Configure and troubleshoot DNS, private DNS zones, and IP whitelisting
• Collaborate with infrastructure teams on hybrid/enterprise network setups

PostgreSQL (Azure hosted)

• Provision and manage Azure PostgreSQL (Flexible / Single Server)
• Implement secure connectivity via private endpoints and firewall rules
• Support backup, restore, and disaster recovery strategies
• Troubleshoot connectivity, performance, and failover scenarios
• Collaborate with application teams during migrations and upgrades

3. Kubernetes (CKA / CKAD Level Responsibilities)

• Develop and maintain Kubernetes manifests (YAML)
• Manage:
• Deployments, StatefulSets, Services, Ingress
• ConfigMaps and Secrets
• Apply securityContext, Pod Security Standards, and RBAC
• Manage namespaces and environment isolation
• Troubleshoot cluster level and application level issues
• Optimize resource usage and ensure cluster stability
• Support GitOps workflows using ArgoCD

4. Git & Source Control Practices

• Enforce Git best practices across teams
• Educate teams on secure and efficient Git workflows
• Integrate Git operations with CI/CD and GitOps tooling

5. ArgoCD (GitOps)

• Design and maintain GitOps deployment strategies
• Configure ArgoCD applications, projects, and sync policies
• Manage RBAC within ArgoCD
• Troubleshoot sync failures, drift issues, and deployment conflicts
• Ensure Git remains the single source of truth
• Collaborate with security and platform teams on deployment controls

6. Azure App Registrations & Identity

• Create and manage Azure App Registrations
• Configure API permissions, scopes, secrets, and certificates
• Implement secure authentication and authorization with AAD
• Integrate app registrations with CI/CD and AKS workloads
• Rotate secrets and ensure compliance with security policies

7. Security & Vulnerability Management

• Integrate Wiz, Fortify, and other scanners into CI/CD
• Analyze vulnerability reports and assess risk impact
• Work with teams to remediate:
• Code vulnerabilities
• Container image issues
• Infrastructure misconfigurations
• Ensure compliance with cloud and organizational security standards
• Promote shift left security practices

8. Scripting & Configuration Management

• Write and maintain automation using:
• YAML (pipelines, Kubernetes)
• JSON (Azure configs, policies)
• Shell (Linux automation)
• PowerShell (Azure automation, tooling)
• Automate repetitive operational tasks
• Maintain clean, reusable, well documented scripts

9. Collaboration, Ownership & Leadership

• Act as technical point of contact for DevOps and cloud topics
• Collaborate with development, infrastructure, and security teams
• Participate in design reviews, architecture discussions, and post mortems
• Mentor junior engineers and promote best practices
• Continuously improve platform reliability, security, and scalability

Desired Candidate Profile