Senior DevOps / Platform Engineer (Azure)

Virtasant•Austin, TX

2d•Remote

About The Position

Virtasant is hiring two Senior DevOps / Platform Engineers, including one Platform Lead, for a large enterprise program supporting healthcare operations and workforce decisioning. The platform will help operations leaders understand workforce activity, make decisions, act within existing enterprise systems, and measure outcomes. The role is a hands-on engineering position responsible for designing, building, securing, and operating production infrastructure in the client’s Azure tenant. The environment will handle regulated workforce and operational data and support isolated production deployments for individual customers. Engineers will establish the initial build environment, develop production infrastructure, and implement automation, security controls, observability, and disaster recovery capabilities. The Platform Lead will additionally own key architectural decisions, establish engineering standards, coordinate engineering activities, and work directly with client architects and security teams. This is a remote contract engagement for candidates based in the United States with US work authorization. The anticipated start is around December 1, 2026; the engagement is multi-month, with potential extension. Occasional domestic travel may be required.

Requirements

Senior Azure platform engineering experience designing, building, and operating production Azure environments end to end, including subscriptions, landing zones, private networking, managed identities, Key Vault, and Azure Monitor; must have personally implemented infrastructure.
Strong hands-on Terraform or Bicep experience, including reusable infrastructure modules, automated provisioning, configuration management, and infrastructure lifecycle ownership.
Experience building production platforms handling PHI or similarly sensitive data and supporting HIPAA, SOC 2, or comparable enterprise security reviews.
Experience participating in penetration testing, addressing security findings, and producing technical evidence for compliance assessments.
Strong experience with Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time and break-glass access, credential rotation, and secure secrets management; understands how to eliminate long-lived credentials from pipelines and repositories.
Experience designing and operating customer-isolated environments with separate networking, encryption keys, and data stores, and automating repeatable deployments while maintaining strict security boundaries.
Experience building production deployment pipelines in enterprise-controlled environments, including secure runners, environment promotion, approval workflows, container and dependency scanning, and coordinated releases across multiple deployments.
Hands-on experience implementing backup strategies, zone-redundant infrastructure, secondary-region recovery environments, and documented RTO/RPO objectives; must have personally executed and validated production disaster recovery or failover tests.
Strong experience implementing logging, metrics, tracing, alerting, security event monitoring, and performance testing; ability to troubleshoot production issues, identify bottlenecks, and participate in on-call support.
Ability to independently own complex infrastructure initiatives, explain architectural decisions to enterprise architects and security reviewers, and document operational procedures and technical trade-offs.
Fluent written and spoken English, with comfort collaborating directly with US-based engineers, enterprise architects, security teams, and client stakeholders.
Must be based in the United States and authorized to work in the US; occasional domestic travel may be required.
Available around December 1, 2026.
For the Platform Lead role: experience leading a small platform engineering team, establishing technical standards, owning architectural decisions, and representing infrastructure designs in enterprise client discussions.

Nice To Haves

Healthcare technology experience, particularly provider, payer, workforce management, or other regulated healthcare platforms.
Snowflake administration, including customer-specific environments, private connectivity, customer-managed encryption keys, replication, and failover.
Production experience operating graph databases such as Neo4j, including clustering, encryption, backup, and patching.
Experience deploying and supporting Azure AI Foundry or Azure OpenAI, including regional data controls and infrastructure for AI applications.
Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, or equivalent security monitoring and governance tools.
Experience with Azure Kubernetes Service (AKS) or Azure Container Apps for production containerized workloads.
Experience using AI-assisted development tools to accelerate infrastructure automation, scripting, and CI/CD engineering.
Experience supporting enterprise platforms with strict security, availability, and customer isolation requirements.

Responsibilities

Design, build, and maintain production Azure infrastructure, including subscriptions, landing zones, private networking, managed identities, Azure Key Vault, and Azure Monitor.
Develop and maintain infrastructure as code with Terraform or Bicep, including reusable modules and automated provisioning processes.
Establish initial build and development environments and develop secure, production-ready infrastructure in the client’s Azure tenant.
Design and implement isolated customer deployments with strict separation of subscriptions, networking, encryption keys, and data stores.
Build repeatable processes for consistent and efficient provisioning of new customer environments.
Implement secure identity and access management using Microsoft Entra ID, workload identities, least-privilege RBAC, just-in-time access, and break-glass procedures.
Design and maintain secure CI/CD pipelines using client-controlled repositories and runners, with automated testing, security scanning, approval workflows, and controlled production releases.
Implement cloud security controls and support enterprise security assessments, penetration testing, compliance reviews, and vulnerability remediation.
Build observability across customer deployments, including centralized logging, metrics, distributed tracing, alerting, and enterprise SIEM integration.
Design and implement resilient infrastructure, backups, zone redundancy, and disaster recovery, including secondary-region failover capabilities.
Define recovery objectives, conduct disaster recovery and performance testing, and document results and remediation actions.
Collaborate with application engineers, security teams, enterprise architects, and client stakeholders to meet operational, security, and performance requirements.
Develop operational runbooks, infrastructure documentation, and incident response procedures.
Participate in production on-call rotations, incident troubleshooting, and post-deployment hypercare.
Own infrastructure through its lifecycle, from architecture and implementation to production deployment, monitoring, troubleshooting, and continuous improvement.
For the Platform Lead role, guide technical architecture, establish platform engineering standards, coordinate engineering activities, and represent the team in client architecture and security discussions.