SENIOR DEVOPS ENGINEER

Job summary

Designs, automates, secures, and operates Microsoft Azure infrastructure, translating architecture and security requirements into reusable Infrastructure as Code, deployment pipelines, policy controls, and operational runbooks. Builds Azure landing zones and hybrid network services, supports HIPAA-aligned cloud operations, and contributes to migrations, disaster recovery, incident response, and reliability using Terraform or Bicep, Azure DevOps or GitHub Actions, and Azure networking services.

Benefits

Qualifications

• At least 5 years of enterprise infrastructure or network engineering experience, including routing, firewalls, segmentation, DNS, VPN, and hybrid connectivity.
• At least 3 years of hands-on Microsoft Azure infrastructure engineering experience in production environments.
• Experience provisioning Azure infrastructure with Terraform or Bicep, including reusable modules and remote state.
• Experience building infrastructure deployment pipelines with Azure DevOps or GitHub Actions.
• Hands-on experience with Azure networking, including virtual networks, network security groups, route tables, Azure Firewall, VPN Gateway, ExpressRoute, Private Link, Private DNS, and load balancers.
• Working knowledge of Microsoft Entra ID, Azure role-based access control, managed identities, service principals, Key Vault, Azure Policy, and privileged access concepts.
• Experience supporting highly available, regulated, or mission-critical environments.
• Ability to translate architecture and governance standards into tested, reusable infrastructure code with controlled approvals and auditability.
• Strong troubleshooting, documentation, communication, and cross-team collaboration skills.
• English reading, writing, and speaking ability; Cantonese or Mandarin is an asset.

Responsibilities

• Design, implement, and maintain Azure landing zones and shared platform services.
• Develop reusable Terraform or Bicep modules for Azure infrastructure.
• Build and operate infrastructure deployment pipelines with validation, approvals, security checks, and rollback controls.
• Design and troubleshoot Azure networking and hybrid connectivity.
• Implement Azure Policy, role-based access control, identity integrations, secrets management, and least-privilege deployment patterns.
• Configure monitoring, logging, alerts, and dashboards to support incident response and audit readiness.
• Support cloud migrations, workload onboarding, cutovers, and post-migration stabilization.
• Design for availability, backup, disaster recovery, and regional resilience; participate in recovery testing.
• Automate operational tasks and maintain architecture documentation, procedures, and recovery runbooks.
• Participate in incident response, root cause analysis, change management, and rotating on-call support.
• Mentor infrastructure and network team members in cloud networking, IaC, automation, and operational practices.

Skills

Degrees

Languages

Work schedule

Industry

Relocation