DevOps Engineer

Independence Pet Group•New York, NY

11d

About The Position

This role provisions, manages, and supports cloud infrastructure and DevOps capabilities for Clarus DevOps workloads. The Cloud Engineer translates architecture decisions and platform requirements into production-ready Terraform modules and reliable CI/CD pipelines covering compute, storage, PaaS services, environment scaffolding, and deployment automation. The role partners closely with application teams, DevOps leads, networking, security, and operations to deliver governed, reproducible, supportable, and cost-aware infrastructure aligned to Calandra Blueprint and Azure Landing Zone standards.

Requirements

3-5 years in Cloud Engineering or DevOps engineering, with hands-on Azure infrastructure provisioning and operational support experience.
Proven Terraform skills - authoring, testing, reviewing, and maintaining modules in a team environment with CI validation.
Strong CI/CD pipeline experience - Azure DevOps, YAML pipeline authoring, reusable templates, approvals, quality gates, and release troubleshooting.
Working knowledge of Azure resource hierarchy (management groups, subscriptions, resource groups), Azure RBAC, Azure Policy, and tagging standards.
Hands-on experience with Azure PaaS and workload services: App Service, AKS, Container Apps, Azure Functions, Azure SQL, Cosmos DB, Storage, and Key Vault.
Experience with secure connectivity patterns - private endpoints, VNet integration, DNS, firewall dependencies, and PaaS workload validation.
Experience supporting deployment security - service connections, managed identities, service principals, Key Vault integration, branch policies, and least-privilege access.
Hands-on experience with monitoring and observability platforms including Azure Monitor, Log Analytics, Application Insights, Prometheus, Grafana, Site24x7, or equivalent enterprise monitoring solutions.
Experience configuring alerts, dashboards, and service health monitoring for cloud infrastructure, applications, CI/CD pipelines, and platform services to support proactive operations.
Proven incident response and production support experience, including triage, root cause analysis, service restoration, and post-incident documentation in business-critical environments.
Ability to troubleshoot complex infrastructure and deployment issues across Azure resources, networking, identity services, container platforms, and CI/CD pipelines.
Clear written communication and the ability to work across application, platform, security, networking, vendor, and operations teams.

Nice To Haves

Experience supporting Azure DevOps platform capabilities - agent pools, variable groups, environments, approvals, artifacts, package feeds, release gates, and pipeline library management.
Familiarity with GitHub Advanced Security or similar DevSecOps tooling for SAST, dependency scanning, secret scanning, and pull request enforcement.
Familiarity with Azure Landing Zone / Calandra-style environment patterns (landing-zone accelerators, policy-as-code, subscription vending, and workload governance).
Azure certifications: AZ-104 (Azure Administrator), AZ-204 (Azure Developer), AZ-400 (DevOps Engineer), or equivalent experience.
Experience with cloud cost management (Azure Cost Management, FinOps practices) in a multi-subscription environment.

Responsibilities

Provision Clarus workload-specific Azure resources - compute (VMs, AKS), storage, PaaS services (Container Apps, App Services, Azure Functions, Azure SQL, Cosmos DB), Key Vault, and managed identities per architecture-approved patterns.
Author and maintain Terraform IaC modules - resource provisioning, testing, peer review, versioning, and CI validation for reusable workload and platform components.
Build, maintain, and support CI/CD pipelines - Azure DevOps YAML pipelines, reusable templates, build and release stages, approvals, quality gates, and environment-specific deployment flows.
Troubleshoot pipeline and deployment issues - failed builds, blocked releases, service connection problems, agent pool issues, package or artifact failures, container image deployments, and rollback scenarios.
Manage secure deployment integrations - Azure service connections, federated credentials, managed-identity authentication, Key Vault-backed secrets, artifact feeds, container registries, and least-privilege access patterns.
Scaffold and manage workload landing-zone structures - subscriptions, resource groups, RBAC assignments, tagging, Azure Policy, and dev / stg / prd environment alignment within the Calandra Azure Landing Zone.
Integrate workload resources with shared network services - private endpoints, VNet integration, DNS registration, firewall rule requests, and connectivity validation for Clarus environments.
Maintain environment parity and operational readiness - governance guardrails, policy compliance, cost tagging, quota management, secure defaults, runbooks, and release support procedures.
Support DevSecOps controls - pipeline security checks, SAST integration, dependency scanning, infrastructure validation, branch policies, pull request checks, and audit-friendly deployment evidence.
Monitor resource health, cost, and compliance - contribute to observability dashboards, alerting baselines, incident troubleshooting, and cost optimization recommendations.