Senior IT & Azure DevOps Engineer

The AES Group • Woburn, MA

4d • Onsite

About The Position

This hands-on platform engineering role builds, automates, secures, and operates enterprise Azure platforms supporting Generative AI, cloud-native applications, data services, and Microsoft Fabric/OneLake workloads. The work focuses on Infrastructure as Code, CI/CD automation, DevSecOps controls, cloud networking, identity, observability, governance, and production readiness across Development, Test, and Production environments.

The engineer designs Azure landing-zone components and builds Terraform modules and Azure DevOps YAML pipelines for repeatable, controlled deployment across multiple environments. The role also deploys and integrates Azure AI and data services using secure private connectivity and governed access models, implements security and production change controls, and supports platform observability, governance, operational documentation, and audit-ready evidence.

Requirements

• 5+ years of experience in Cloud Engineering, DevOps, DevSecOps, SRE, or Platform Engineering.
• 3+ years of hands-on Azure delivery experience in production environments.
• Strong hands-on experience with Terraform, Azure DevOps, Git, YAML pipelines, Azure networking, Entra ID, Azure RBAC, Key Vault, private endpoints, Azure Monitor, and Log Analytics.
• Proven experience implementing secure multi-environment deployment practices.
• Demonstrated ability to troubleshoot complex cloud platform issues.
• Ability to collaborate across application, cybersecurity, network, data, architecture, and governance teams.
• Strong technical documentation skills supporting production operations.

Nice To Haves

• Experience with Azure AI Foundry, Azure OpenAI, Azure AI Search, and Retrieval-Augmented Generation (RAG).
• Experience with Microsoft Fabric, OneLake, Microsoft Purview, and API Management.
• Knowledge of AKS, Azure App Services, GitOps, Azure Policy, and Bicep.
• Proficiency in PowerShell, Python, and containerization technologies.
• Familiarity with enterprise AI governance and cloud security best practices.
• Experience in regulated industries such as banking, financial services, healthcare, or government.
• Microsoft certifications such as AZ-104, AZ-305, AZ-400, AZ-500, AI-102, or AI-900.

Responsibilities

• Engineer Azure landing-zone components, including subscriptions, resource groups, VNets, subnets, NSGs, private endpoints, private DNS, routing, peering, firewall integration, identity boundaries, naming standards, tagging, and environment isolation.
• Build and maintain Terraform-based Infrastructure as Code modules and Azure DevOps YAML pipelines for repeatable provisioning, automated validation, approvals, artifact promotion, release gates, rollback, and controlled deployments across multiple environments.
• Deploy and integrate Azure AI Foundry, Azure OpenAI, Azure AI Search, API Management, Key Vault, Storage, managed databases, Microsoft Fabric/OneLake, Purview, and RAG patterns using secure private connectivity and governed access models.
• Implement DevSecOps controls, including least-privilege RBAC, Managed Identity, App Registrations, OAuth/OIDC, Key Vault secret management, secure pipeline variables, SAST, dependency scanning, IaC scanning, secret scanning, vulnerability gates, and production change controls.
• Operate platform observability and governance using Azure Monitor, Application Insights, Log Analytics, alerts, dashboards, Azure Policy, cost/quota monitoring, runbooks, architecture diagrams, operational documentation, and audit-ready evidence.
• Troubleshoot complex cloud platform issues and collaborate across application, cybersecurity, network, data, architecture, and governance teams.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed