Azure DevOps Engineer

Hi,

We have an immediate requirement for Azure Cloud Engineer with our organization

SHI Solutions India Pvt Ltd.

PFB job details:

Work Location - Hyderabad

Looking for immediate joiners

JD:

Azure Cloud Administrator / Azure DevOps Engineer

Experience: 2 5 Years

Job Summary

We are seeking a highly capable Azure Cloud Administrator / Azure DevOps Engineer with 25 years of hands-on experience managing enterprise-grade Azure environments. The role involves day-to-day cloud operations, identity and access management, containerized workloads, secure networking, monitoring, cost optimization, and DevOps enablement.

The ideal candidate has strong production exposure, understands secure-by-design Azure architectures, and is comfortable working with containerized applications, private endpoints, and enterprise networking patterns.

Key Responsibilities

Azure Cloud Operations & Administration

• Monitor, Manage and maintain Azure subscriptions, resource groups, governance controls, resource using Azure monitor, log analytics, application insights and third party tools as per requirement.
• Monitor, Administer and support Azure resources including but not limited to Azure App Services, Virtual Machines, VNets, Load Balancers, Azure Databases (PaaS & IaaS), Storage Accounts, Azure Functions, Azure AD, RBAC, Azure policies etc.
• Perform routine operational tasks including scaling, patching, backups, setting up DRs, performing DR Drills, and invoking DR in case of issues, updates, upgrades, lifecycle management & compliances.
• Ensure high availability, reliability, and performance of Azure-hosted workloads.
• Troubleshoot production issues and perform root cause analysis (RCA).
• Support high availability and scaling solutions.

Containerization & Cloud-Native Workloads (Must Have)

• Manage and operate containerized workloads using Docker and Azure Kubernetes Service (AKS).
• Deploy, monitor, and troubleshoot applications running on AKS.
• Manage Kubernetes resources such as namespaces, deployments, services, ingress, secrets, and config maps.
• Integrate AKS with Azure DevOps pipelines for CI/CD.
• Implement container security best practices (image scanning, secrets handling, least privilege access).
• Support hybrid workloads where containers coexist with App Services and VMs.
• Identity, Access & Security (Microsoft Entra ID)
• Administer Microsoft Entra ID (Azure AD) users, groups, enterprise apps, roles, and access policies.
• Design and manage Role-Based Access Control (RBAC) using least-privilege principles.
• Create, manage, rotate, and audit Service Principals and managed identities.
• Manage Azure Key Vaults for secrets, certificates, and keys.
• Implement secure access patterns using managed identities wherever possible.
• Networking, Private Connectivity & Secure Access
• Configure and manage Azure Virtual Networks, Subnets, NSGs, and Route Tables.
• Implement Private Endpoints for services such as Storage Accounts, Key Vaults, Databases, and App Services.
• Manage private DNS zones and name resolution for private connectivity.

Support private connectivity patterns including:

• VNet Integration for App Services
• Private Link
• Hybrid connectivity (VPN / ExpressRoute knowledge preferred)
• Configure and manage Application Gateway, Azure Front Door, Load Balancers, and WAF.
• Ensure secure inbound and outbound traffic flow across Azure environments.

Certificate & Secrets Management

• Manage SSL/TLS certificates across Azure services (App Gateway, Front Door, App Services, AKS ingress).
• Handle certificate lifecycle management including creation, renewal, rotation, and expiry monitoring.
• Store and manage certificates securely using Azure Key Vault.
• Support integration of third-party or CA-issued certificates.

Monitoring, Logging & Observability

• Configure and manage Azure Monitor, Application Insights, and Log Analytics Workspaces.
• Implement proactive monitoring, alerts, dashboards, and availability tests.
• Perform root cause analysis for performance, availability, and security incidents.
• Ensure proper logging and telemetry for both platform and application layers.

DevOps, CI/CD & Automation

• Manage and maintain Azure DevOps pipelines (CI/CD) for containerized and non-containerized applications.
• Configure and manage Azure DevOps service connections, permissions, and access controls.
• Configure and manage repositories e.g git; branches strategies, and code reviews.
• Automate infrastructure and operational tasks using Azure CLI, PowerShell, terraform, and scripting.
• Support Infrastructure as Code workflows (ARM / Bicep / Terraform preferred).

Cost Optimization & Governance

• Monitor Azure spend using Cost Management + Billing.
• Identify and remediate unused or underutilized resources.
• Implement budgets, alerts, tagging strategies, and cost optimization best practices.
• Provide regular cost and utilization insights to stakeholders.

Security & Compliance

• Review and remediate findings from Microsoft Defender for Cloud.
• Apply security best practices across compute, network, identity, and data layers.
• Support audit, compliance, and governance initiatives.
• Ensure secure configurations aligned with organizational standards.

Strong experience with:

• Azure App Services, VMs, Azure Functions
• Azure Storage Accounts & Databases
• Application Gateway, Azure Front Door, WAF
• Azure Monitor, App Insights, Log Analytics
• Strong containerization experience (Docker + AKS is mandatory)
• Solid understanding of Microsoft Entra ID (Azure AD) and RBAC
• Experience managing Service Principals, Managed Identities, and Key Vault
• Hands-on experience with Private Endpoints, Private Link, and Private DNS
• Experience managing certificates and secure connectivity
• Proficient in Azure CLI / PowerShell
• Experience with Azure DevOps pipelines and permissions

Good to Have

• Azure certifications (AZ-104, AZ-305, AZ-400)
• Terraform / Bicep / ARM templates
• AKS security, ingress controllers, and networking
• Hybrid networking (VPN / ExpressRoute)
• Exposure to multi-subscription or enterprise-scale Azure environments