DevSecOps Engineer - Azure

Integra•Dallas, TX

4d•Onsite

About The Position

The DevSecOps Engineer designs, automates, secures, deploys, and operates cloud platforms and delivery capabilities within Microsoft Azure. This hands-on role establishes reusable Infrastructure as Code, CI/CD, container, serverless, API management, networking, security, observability, and environment-management patterns for enterprise data, integration, and application workloads. The engineer collaborates with Enterprise Architecture, Cybersecurity, Infrastructure, Data Engineering, Enterprise Integration, and Application Development teams to create secure, repeatable, and supportable deployment practices across development, test, staging, disaster recovery, and production environments. The position is 100% onsite in the far North Dallas/Plano area. It covers DevSecOps and CI/CD automation; infrastructure as code and cloud automation; containers, serverless, and integration automation; API gateway and API lifecycle automation; Azure networking, security, and compliance; and observability, platform engineering, and collaboration. Integra delivers turnkey data center solutions, managing phases from site selection and design through manufacturing, procurement, commissioning, and warranty. The company describes a culture of collaboration, accountability, and continuous improvement, and provides equal employment opportunities. Reasonable accommodations are available during the hiring process upon request.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Software Engineering, Cybersecurity, Cloud Engineering, or a related discipline, or equivalent professional experience.
At least 5 years of professional experience in DevOps, DevSecOps, cloud engineering, platform engineering, infrastructure automation, or software delivery.
At least 3 years of hands-on experience implementing and supporting production workloads in Microsoft Azure.
Proven experience building CI/CD pipelines and Infrastructure as Code solutions for enterprise environments.
Experience deploying and operating cloud-native applications, APIs, containers, serverless services, or integration workloads.
Strong understanding of Azure identity, networking, security, monitoring, governance, and deployment architecture.
Strong scripting, troubleshooting, source-control, documentation, communication, and cross-functional collaboration skills.
Experience with Git, Azure Repos and/or GitHub, Azure DevOps Pipelines and/or GitHub Actions, YAML templates, reusable workflows, artifacts, approvals, gates, protected environments, automated testing, deployment, validation, and rollback.
Experience with Terraform, AzureRM, Bicep, Azure Resource Manager, Azure CLI, Azure PowerShell, PowerShell, Bash, Python, REST APIs, Microsoft Graph, infrastructure testing, policy as code, and configuration validation.
Experience with Docker, Azure Container Registry, Azure Container Apps, AKS, Kubernetes, Helm, Azure Functions, Logic Apps, Service Bus, Event Grid, autoscaling, observability, and vulnerability scanning.
Experience with Azure API Management, OpenAPI, REST APIs, versioning, products, subscriptions, policies, OAuth 2.0, OpenID Connect, JWT, certificates, and managed identity authentication.
Experience with Azure virtual networks, private networking, firewall and gateway services, routing, TLS, DNS, Microsoft Entra ID, RBAC, Key Vault, Azure Policy, Defender for Cloud, Azure Monitor, Log Analytics, Application Insights, and Kusto Query Language.

Nice To Haves

Experience supporting enterprise platforms such as Oracle Fusion ERP, Deltek Costpoint, SAP S/4HANA, Microsoft Dynamics 365, Microsoft Fabric, Azure Databricks, Azure Data Factory, ADLS Gen2, Power BI, Salesforce, ServiceNow, Primavera P6, Procore, or comparable systems.
Experience with enterprise landing zones, hybrid connectivity, shared cloud platforms, and regulated or security-sensitive environments.
Microsoft Certified: DevOps Engineer Expert, Azure Security Engineer Associate, Azure Network Engineer Associate, or HashiCorp Certified: Terraform Associate certification; desirable but not required.

Responsibilities

Design, implement, and maintain CI/CD pipelines using Azure DevOps Pipelines and/or GitHub Actions, including reusable YAML templates for infrastructure, applications, APIs, containers, serverless services, integration components, and data-platform resources.
Implement automated build, test, security scanning, artifact management, deployment, validation, approval, rollback, and release processes; establish Git, code review, versioning, release, protected-environment, and deployment-control standards.
Automate promotion across development, test, staging, disaster recovery, and production environments, using secure pipeline authentication and eliminating embedded secrets.
Develop, test, and maintain reusable Terraform and/or Bicep Infrastructure as Code modules and automate Azure infrastructure, networking, security, monitoring, application, integration, and data-platform deployments.
Establish module standards and manage Terraform remote state, locking, state isolation, plan review, imports, drift detection, and controlled recovery; automate linting, validation, security scanning, policy checks, cost review, and configuration-drift remediation.
Build, secure, deploy, and operate containerized applications, APIs, and integration services; automate image building, testing, scanning, signing, promotion, retention, and lifecycle management.
Deploy workloads to Azure Container Apps, Azure Kubernetes Service, Azure Container Instances, or App Service containers as appropriate, and automate deployments for Azure Functions, Logic Apps, Service Bus, Event Grid, and related services.
Configure managed identities, Key Vault references, private endpoints, virtual network integration, diagnostic settings, secure application configuration, messaging patterns, health validation, staged releases, rollback, scaling, networking, and observability.
Deploy and manage Azure API Management using Infrastructure as Code and automated pipelines; automate API publication and configuration from OpenAPI specifications.
Configure API products, subscriptions, version sets, revisions, backends, named values, certificates, and policies; implement authentication and authorization controls and reusable API policies.
Automate API testing, contract and policy validation, versioning, promotion, and rollback.
Design and automate Azure networking and connectivity services, including virtual networks, subnets, route tables, network security groups, private DNS zones, private endpoints, service endpoints, and related firewall and gateway services.
Apply security-by-design, Zero Trust, defense-in-depth, and least-privilege principles; implement Azure RBAC, Microsoft Entra ID groups, managed identities, service principals, privileged access processes, separation of duties, Azure Policy, and compliance reporting.
Integrate Microsoft Defender for Cloud, vulnerability management, Key Vault, encryption, security testing, and policy-as-code; support security reviews, threat modeling, incident response, audit evidence, vulnerability remediation, and service hardening.
Implement centralized logging, metrics, distributed tracing, dashboards, and alerts using Azure Monitor, Log Analytics, Application Insights, and related services.
Monitor deployments, resource health, application performance, security events, certificate expiration, capacity, and cost, and automate operational remediation where appropriate.
Build reusable platform capabilities, golden paths, and reference implementations for applications, APIs, containers, functions, messaging, infrastructure, and data-platform services.
Create automation using PowerShell, Azure CLI, Bash, Python, REST APIs, and Microsoft Graph.
Partner with Data Engineering teams to automate Microsoft Fabric, Azure Data Factory, ADLS Gen2, Databricks, Power BI, and related platform deployments where applicable.
Maintain technical documentation, architecture diagrams, runbooks, standards, reusable templates, and troubleshooting procedures.