Lead DevOps Engineer

Azure Cloud Engineering

• Design, provision, configure, and support solutions on Microsoft Azure across development, test, UAT, and production environments.
• Implement and troubleshoot Azure Service Bus, Azure Functions, Azure Key Vault, Azure Databricks, Azure Logic Apps, Azure Container Registry, Azure Monitor, and Log Analytics.
• Configure secure application access using Microsoft Entra ID, managed identities, Azure RBAC, Key Vault references, and least-privilege access controls.
• Support VNet-integrated and private-network workloads, including private endpoints, DNS resolution, firewall rules, routing, and outbound connectivity.

AKS, Kubernetes, and Docker

• Design, deploy, upgrade, and operate Azure Kubernetes Service clusters and containerized application workloads.
• Create and maintain Kubernetes manifests and Helm charts for Deployments, StatefulSets, Services, Ingress, ConfigMaps, Secrets, Jobs, and autoscaling.
• Implement readiness, liveness, and startup probes, resource requests and limits, pod disruption controls, and deployment rollback strategies.
• Build secure and optimized Docker images; manage image tagging, vulnerability scanning, ACR publishing, and promotion between environments.
• Troubleshoot pod scheduling, CrashLoopBackOff, image pull, DNS, certificate, ingress, storage, resource, and network issues.

CI/CD and Release Automation

• Design and maintain reusable Jenkins declarative pipelines for build, test, code quality, containerization, security checks, publishing, deployment, validation, and rollback.
• Implement branch-based and environment-based delivery workflows with approvals, segregation of duties, artifact traceability, and controlled promotion.
• Integrate Git, Jenkins, SonarQube, Docker, ACR, AKS, and Azure services into end to-end automated pipelines.
• Automate operational tasks using PowerShell, Bash, Python, Azure CLI, kubectl, and Helm.

DevSecOps and Code Quality

• Integrate SonarQube analysis and Quality Gates into CI/CD pipelines for code coverage, bugs, vulnerabilities, code smells, duplication, and technical debt.
• Ensure failed quality or security checks block promotion in accordance with release governance.
• Protect credentials and secrets using Jenkins credentials, managed identities, and Azure Key Vault; prevent secrets from being stored in source code or pipeline logs.
• Collaborate with security teams on vulnerability remediation, access reviews, audit evidence, and platform hardening.

Monitoring and Production Support

• Build and maintain Grafana dashboards for infrastructure, Kubernetes, application, and integration-service health.
• Configure and use Prometheus, Azure Monitor, Log Analytics, Application Insights, and alerting for proactive monitoring.
• Lead incident troubleshooting, root-cause analysis, corrective actions, and production stabilization for cloud and deployment issues.
• Create runbooks, operational procedures, architecture documentation, deployment guides, and support handover material

Required Technical Skills

• Strong experience with Microsoft Azure, including architecture, deployment, networking, identity management, security monitoring, and troubleshooting.
• Advanced knowledge of AKS (Azure Kubernetes Service), including cluster and workload operations, Helm, ingress, scaling, upgrades, and troubleshooting.
• Hands-on experience with Docker and Azure Container Registry (ACR) for image creation, optimization, tagging, publishing, and environment promotion.
• Expertise in Jenkins and CI/CD pipelines, including shared libraries, approvals, quality gates, deployment strategies, and rollback mechanisms.
• Good understanding of Azure Service Bus, including queues, topics, subscriptions, authentication, RBAC, networking, monitoring, and troubleshooting.
• Experience with Azure Functions, including deployment, configuration, managed identity integration, storage dependencies, and runtime troubleshooting.
• Knowledge of Azure Key Vault for managing secrets, certificates, access policies, RBAC, managed identities, and application integrations.
• Experience working with Grafana and Prometheus for monitoring, dashboards, metrics collection, alerting, and observability.
• Hands-on experience with SonarQube