Job Title: Azure Engineer
Location: Omaha or Remote
Duration: 8 month
Contract/Contract to hire: contract to hire
Job Description:
Our client is seeking an Azure Engineer with ITOps expertise to work on a team focused on keeping the systems secure, stable, and available. The ideal candidate will bring deep expertise in production support, strong analytical and troubleshooting skills, and a genuine passion for ensuring critical systems operate smoothly and efficiently. You’ll collaborate closely with product, security, and operations teams to automate everything—provisioning, deployments, observability, incident response, and compliance—while supporting a rotational shift model to ensure 24×7 coverage.
Role Description
- Design, build, and maintain Azure landing zones and platform services (e.g., VNet, Private Endpoints, Key Vault, Azure Firewall/NSGs, Application Gateway/WAF)
- Implement Infrastructure as Code (IaC) with Terraform and/or Bicep; enforce GitOps workflows (branching, PRs, policy checks)
- Create reusable modules, pipelines, and golden patterns for app teams; champion automation-first approaches
- Define and measure SLIs/SLOs, error budgets, and reliability roadmaps for critical services
- Implement and tune observability (logs, metrics, traces) using Azure Monitor, Log Analytics, Application Insights, and Prometheus/Grafana where applicable
- Conduct capacity planning, resiliency testing (chaos, failover, DR), and performance tuning across services
- Build secure, robust CI/CD pipelines (GitHub Actions / Azure DevOps Pipelines) with automated testing, scans, and approvals
- Standardize deployment strategies (blue/green, canary, rolling) for containerized and PaaS workloads
- Implement guardrails using Azure Policy, RBAC, PIM, and Blueprints (or equivalent) to enforce least privilege and compliance (e.g., SOC 2, ISO 27001, HIPAA as relevant)
- Manage secrets and certificates (Key Vault) and integrate security testing (SAST/DAST/Container scanning) into pipelines
- Support vulnerability remediation and patching SLAs
- Own incident response, including rotational shifts and on-call; lead triage, root cause analysis (RCA), and post-incident reviews
- Optimize cost (FinOps), tagging standards, budgets, and proactive spending alerts
- Maintain runbooks, knowledge base articles, and automation for routine operations
- Act as a technical mentor; review designs/PRs; contribute to architecture decisions
- Partner with app teams to onboard workloads, define nonfunctional requirements, and drive platform adoption
Your Skills and Experience
- 5 to 7 years of hands-on experience supporting Azure-based infrastructure and services in production
- Expertise in several of: AKS, App Services, Functions, APIM, Azure SQL/MI, Cosmos DB, Storage, Event Hub/Service Bus, Redis, VNet/Peering, Private Link, Application Gateway/WAF, Front Door
- Strong IaC with Terraform (preferred) and/or Bicep; Git-based workflows; GitHub or Azure DevOps
- Proven SRE background: SLI/SLO design, error budgets, incident management, RCA, capacity and performance engineering
- CI/CD design and operations (GitHub Actions / Azure DevOps Pipelines); artifact/versioning strategies; release governance
- Observability with Azure: Monitor, Log Analytics, Application Insights, and alerting/automations (Action Groups, Logic Apps, Functions)
- Solid networking fundamentals (DNS, TLS, routing, firewalls, load balancing), identity (AAD/Entra ID), and secrets management (Key Vault)
- Scripting proficiency in PowerShell and/or Python; Linux fundamentals
- Strong understanding of Azure security best practices, including Role-Based Access Control (RBAC), Privileged Identity Management (PIM), Azure Policy, and Managed Identities for secure access management and governance
#INDPRO #LI-AP1