Devops Engineer

Remote- 75 rate- National grid
Key Responsibilities
Design and implement Azure landing zones using hub-and-spoke architecture, ensuring secure segmentation, governance, and scalable network topology.
Build and maintain infrastructure as code with Terraform, including reusable modules, workspaces, remote state, and policy enforcement.
Create and manage CI/CD pipelines with GitHub Actions (or equivalent), including build, test, security scanning, artifact management, and environment promotions.
Architect, deploy, and operate AKS clusters and supporting services; implement secure-by-default configurations, autoscaling, and resilient workloads.
Containerize and optimize applications using Docker; reduce large image sizes via multi-stage builds, minimal base images, layer/caching optimization, and artifact slimming.
Diagnose and resolve production issues across the stack (infrastructure, networking, containers, applications), including on-call participation as needed.
Implement and manage Azure Storage accounts with RBAC, ensuring least-privilege access, secure endpoints, and proper data lifecycle configurations.
Apply Azure security best practices across subscriptions, resource groups, and services; support governance, identity/access, secrets management, and compliance controls.
Deploy and operate Azure App Service and App Service Plans; automate blue/green or canary deployments, slot management, and configuration/secrets handling.
Collaborate with development, security, and operations teams to establish guardrails, observability, and continuous improvement of platform reliability and performance.
Produce clear documentation, runbooks, and diagrams; mentor team members in DevOps and cloud best practices.
Required Skills And Experience
Strong hands-on experience implementing Azure hub-and-spoke architectures (VNets, peering, firewalls, routing, private endpoints, and landing zone patterns).
Expert in Terraform for Azure (providers, modules, remote state, state management, CI integration, and policy as code).
Proficient with Git-based CI/CD, specifically GitHub Actions (workflows, reusable actions, environments, secrets, OIDC federation, and approvals).
Deep understanding of the Linux file system and internals relevant to operations (permissions, ACLs, namespaces, cgroups, storage drivers, filesystems, and performance troubleshooting).
Production experience with Docker and AKS, including security hardening (network policies, PodSecurity standards, secrets, images), scaling strategies, and debugging.
Proven ability to refactor large Docker images to be performant and maintainable (multi-stage builds, slimming dependencies, caching strategy, scanning and provenance).
Strong Azure Storage account expertise, including RBAC, IAM integration, network isolation, encryption, and lifecycle/replication configurations.
Solid grounding in Azure security concepts: identity and access management, role design, managed identities, Key Vault usage, network security, monitoring/alerting, and policy governance.
Experience deploying and operating applications on Azure App Service and App Service Plans, including pipelines, deployment slots, app settings, and secure configuration.
Strong troubleshooting skills for production incidents across compute, networking, and application layers; adept with logs, metrics, and tracing.
Proficiency with scripting/automation (e.g., Bash, PowerShell) and use of Azure CLI and/or Azure PowerShell.

Work arrangement
Yes